NFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:07 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:08 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:08 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:08 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x0, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:08 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:08 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:08 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:08 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x0, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:08 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:09 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x0, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:09 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:09 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:09 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:09 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:09 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:09 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:09 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:10 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:10 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:10 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x0, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:10 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:10 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x0, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:10 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:10 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:10 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x0, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:11 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:11 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x0, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x0, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:11 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:11 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x0, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x0, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:11 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:11 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x0, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:11 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:12 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x0, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x0, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:12 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:12 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x0, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:12 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:12 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x0, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:12 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:12 executing program 3: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x0, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:12 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:12 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) 00:19:13 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) 00:19:13 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:13 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x0, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) [ 1522.087018][T10237] list_del corruption. prev->next should be ffff888061f7b000, but was ffff888061ba6000. (prev=ffffffff8e5b0b20) [ 1522.104275][T10237] ------------[ cut here ]------------ [ 1522.110127][T10237] kernel BUG at lib/list_debug.c:59! [ 1522.118165][T10237] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1522.124307][T10237] CPU: 0 PID: 10237 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller-13164-g78b421b6a7c6 #0 00:19:13 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x0, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) [ 1522.134514][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1522.144600][T10237] RIP: 0010:__list_del_entry_valid+0x11f/0x1b0 [ 1522.150817][T10237] Code: 16 a7 8a e8 a3 ed 50 fd 0f 0b 48 89 ca 48 c7 c7 00 17 a7 8a e8 92 ed 50 fd 0f 0b 4c 89 c2 48 c7 c7 60 17 a7 8a e8 81 ed 50 fd <0f> 0b 48 89 d1 48 c7 c7 e0 17 a7 8a 4c 89 c2 e8 6d ed 50 fd 0f 0b [ 1522.170738][T10237] RSP: 0018:ffffc9001603fd58 EFLAGS: 00010282 [ 1522.176877][T10237] RAX: 000000000000006d RBX: 0000000000000001 RCX: 0000000000000000 [ 1522.184886][T10237] RDX: 0000000000000000 RSI: ffffffff8168cf9c RDI: 0000000000000005 [ 1522.192895][T10237] RBP: ffff888061f7b000 R08: 0000000000000005 R09: 0000000000000000 [ 1522.201163][T10237] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888061f7b008 [ 1522.209174][T10237] R13: ffff888061f7e098 R14: ffff888058397000 R15: ffff888061f7e5f0 [ 1522.217190][T10237] FS: 000055555736a400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1522.226161][T10237] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 00:19:13 executing program 5: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:19:13 executing program 1: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x0, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) [ 1522.232784][T10237] CR2: 00007faed6700718 CR3: 0000000023e19000 CR4: 00000000003506f0 [ 1522.240799][T10237] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1522.248809][T10237] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1522.256817][T10237] Call Trace: [ 1522.260124][T10237] [ 1522.263095][T10237] nfc_llcp_unregister_device+0xb8/0x260 [ 1522.268877][T10237] nfc_unregister_device+0x196/0x330 [ 1522.274209][T10237] virtual_ncidev_close+0x52/0xb0 [ 1522.279364][T10237] __fput+0x27c/0xa90 [ 1522.283393][T10237] ? virtual_nci_open+0x10/0x10 [ 1522.288300][T10237] task_work_run+0x16f/0x270 [ 1522.293019][T10237] ? task_work_cancel+0x30/0x30 [ 1522.297960][T10237] exit_to_user_mode_prepare+0x210/0x240 [ 1522.303678][T10237] syscall_exit_to_user_mode+0x1d/0x50 [ 1522.309195][T10237] do_syscall_64+0x46/0xb0 [ 1522.313674][T10237] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1522.319633][T10237] RIP: 0033:0x7f526a23e01b [ 1522.324084][T10237] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 1522.344197][T10237] RSP: 002b:00007f526a4cfb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1522.352653][T10237] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f526a23e01b [ 1522.360664][T10237] RDX: 0000000000000000 RSI: 0000001b2d02357c RDI: 0000000000000004 [ 1522.368695][T10237] RBP: 00007f526a3ad980 R08: 0000000000000000 R09: 00000000aaee8e03 [ 1522.376704][T10237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000173bd3 00:19:13 executing program 4: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x0, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) [ 1522.384710][T10237] R13: 00007f526a4cfc80 R14: 00007f526a3ac050 R15: 0000000000000032 [ 1522.392756][T10237] [ 1522.395813][T10237] Modules linked in: [ 1522.413695][T10237] ---[ end trace 0000000000000000 ]--- [ 1522.419664][T10237] RIP: 0010:__list_del_entry_valid+0x11f/0x1b0 00:19:13 executing program 2: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x1b, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x0, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d000000180001801400020069703665727370616e30000000000000f7381f1a4a8f34d5a48c55424b02fe280386b5c5e0b4af48227e83409609acc349601dd658fc75b0f5e2b7200060b22350366b465a980b443b2c0cac6735241590d733b2bebe3205349bfc16b1337cec4eb0d3928f89dc6eeaabb81ab06cbc03c9b1511fcca12c2224b77a03c6c342224bf68f24f100227cd216a6f5"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 00:19:13 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x50c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x1f, 0x5, 0x9, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x2, 0x3ff, 0x1f, 0x7fff, 0x20, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x822e, 0x2, 0x0, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x4, 0x30, 0x12, 0xb, 0x18, 0x6, 0xc, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x0, 0xf9, 0xf3, 0x7, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xb, 0xc, 0x12, 0x30, 0x3, 0x1, 0xb7ff02d75464aa8f, 0xb, 0x16, 0x30, 0x18, 0x4, 0x36, 0x48, 0x9, 0x3, 0xc, 0x5, 0x6c, 0x48, 0x0, 0x60, 0x6, 0x3, 0x1b, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x9, 0x3d00, 0x7, 0xc000, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x8, 0x7ff, 0x400, 0x8, 0x2, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0x6, 0x9, 0x4, 0x87, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xfff, 0x62d, 0xff, 0x3f, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x80, 0x5, 0x9, 0x0, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0xb, 0xb, 0x12, 0x30, 0x6c, 0x9, 0x5, 0x48, 0x1b, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x6b, 0x5, 0x6c, 0x30, 0x2]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1}, {0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x1d}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x158b, 0x7, 0x6, 0x7, 0x8, 0x8, 0xdb6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x36, 0x2, 0xb, 0x4, 0x3d, 0x48, 0x5, 0x9, 0xc, 0x18, 0x9, 0xb, 0x36, 0x18, 0x41, 0x3, 0x12, 0x34, 0x60, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa27, 0x7, 0x6, 0x1, 0xffff, 0x3, 0x3f, 0x501]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x7, 0x9}, {0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x50c}}, 0x400400c0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb4, 0x453, 0x200, 0x70bd27, 0x25dfdbfe, "ea97663988ee37c90708940afe0b0af9451fb1a1b6abf62d80cc8bfcbf8081d3c113786fb6b60fcfb56dfb6724d8e7b45d6e912fc54c7365dd54963e0b0a93630da0fb25ad3b6721b42fe2c442d94d39a66451210779571b6cd6cd8cc3c52a8ad31076c3036c9c96c92505e289896062ab2631999a6857027b239ba753955ced030d334314604fcc7ea8a0b2499a3179636c76d870a1596850d1dca1f3fe0bc8588fc1", [""]}, 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000700)={0x1, 0xff, 0x7, &(0x7f00000006c0)={0x8, "f24eeeda2b07cbba574c565e922d4d9878786c95d513c75ffa99d5235c462f28bb"}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) [ 1522.429779][T10237] Code: 16 a7 8a e8 a3 ed 50 fd 0f 0b 48 89 ca 48 c7 c7 00 17 a7 8a e8 92 ed 50 fd 0f 0b 4c 89 c2 48 c7 c7 60 17 a7 8a e8 81 ed 50 fd <0f> 0b 48 89 d1 48 c7 c7 e0 17 a7 8a 4c 89 c2 e8 6d ed 50 fd 0f 0b [ 1522.450841][T10237] RSP: 0018:ffffc9001603fd58 EFLAGS: 00010282 [ 1522.457151][T10237] RAX: 000000000000006d RBX: 0000000000000001 RCX: 0000000000000000 [ 1522.468787][T10237] RDX: 0000000000000000 RSI: ffffffff8168cf9c RDI: 0000000000000005 [ 1522.481646][T10237] RBP: ffff888061f7b000 R08: 0000000000000005 R09: 0000000000000000 [ 1522.490095][T10237] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888061f7b008 [ 1522.498169][T10237] R13: ffff888061f7e098 R14: ffff888058397000 R15: ffff888061f7e5f0 [ 1522.510824][T10237] FS: 000055555736a400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1522.521853][T10237] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1522.528520][T10237] CR2: 00007f9730dad988 CR3: 0000000023e19000 CR4: 00000000003506f0 [ 1522.538014][T10237] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1522.551539][T10237] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1522.559846][T10237] Kernel panic - not syncing: Fatal exception [ 1522.566168][T10237] Kernel Offset: disabled [ 1522.570510][T10237] Rebooting in 86400 seconds..