Warning: Permanently added '[localhost]:62473' (ECDSA) to the list of known hosts. 2024/11/05 18:11:17 fuzzer started 2024/11/05 18:11:17 dialing manager at localhost:46317 syzkaller login: [ 68.106745] cgroup: Unknown subsys name 'net' [ 68.357160] cgroup: Unknown subsys name 'cpuset' [ 68.392223] cgroup: Unknown subsys name 'rlimit' 2024/11/05 18:11:35 syscalls: 226 2024/11/05 18:11:35 code coverage: enabled 2024/11/05 18:11:35 comparison tracing: enabled 2024/11/05 18:11:35 extra coverage: enabled 2024/11/05 18:11:35 setuid sandbox: enabled 2024/11/05 18:11:35 namespace sandbox: enabled 2024/11/05 18:11:35 Android sandbox: enabled 2024/11/05 18:11:35 fault injection: enabled 2024/11/05 18:11:35 leak checking: enabled 2024/11/05 18:11:35 net packet injection: enabled 2024/11/05 18:11:35 net device setup: enabled 2024/11/05 18:11:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/05 18:11:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/05 18:11:35 USB emulation: enabled 2024/11/05 18:11:35 hci packet injection: enabled 2024/11/05 18:11:35 wifi device emulation: enabled 2024/11/05 18:11:35 802.15.4 emulation: enabled 2024/11/05 18:11:35 fetching corpus: 0, signal 0/0 (executing program) 2024/11/05 18:11:36 starting 8 fuzzer processes 18:11:36 executing program 0: semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)=[0xff, 0xfffb, 0x8000, 0x2, 0x9, 0x81, 0x90c9, 0x9]) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x3, 0x2) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000040)=""/109) r1 = semget$private(0x0, 0x0, 0x341) semop(r1, &(0x7f00000000c0)=[{0x1, 0x3}, {0x3, 0xfa, 0x1000}, {0x2, 0x20, 0x1000}, {0x4, 0x9, 0x1800}, {0x3, 0x7, 0x1800}, {0x4, 0x1}], 0x6) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000100)=""/105) r2 = semget$private(0x0, 0x2, 0x0) r3 = semget$private(0x0, 0x4, 0x22) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0xee00, 0xee00, 0xee00, 0x0, 0x9, 0x9}, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffb}) semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f0000000200)) semget$private(0x0, 0x4, 0x400) semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f0000000240)=""/134) semop(r2, &(0x7f0000000300)=[{0x350aa6edf5832de9, 0x400, 0x1000}, {0x1, 0xc97, 0x1000}, {0x0, 0x100}, {0x1, 0xe2, 0x1800}], 0x4) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000340)=""/185) socketpair(0x6c43bb3bdf8cee8a, 0x1, 0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x40014) 18:11:36 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x80000001, 0x9, 0x100, 0xa3f}, 0x10) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80000) r1 = accept$packet(r0, 0x0, &(0x7f00000000c0)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000100)=0x10001, &(0x7f0000000140)=0x4) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r3 = accept$packet(r0, 0x0, &(0x7f0000000240)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6}, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7d1, 0x45}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x400c801) r4 = accept$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) getitimer(0x2, &(0x7f0000000440)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000480)=@req={0x4, 0x3, 0x80, 0x6}, 0x10) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x20040044) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname(r6, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000640)=0x80) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x4082, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x355}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x848c0) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) accept4$packet(r4, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14, 0x0) 18:11:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3fa9, 0x25}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3325}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @initial, {0xf, 0x9}}, @ver_80211n={0x0, 0x81, 0x2, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x15, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x20}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x81}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6d}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}]}, 0x58}}, 0x40400) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r1, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="35b193a53304"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e65afa96ffc1"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="161402f08fd1"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000045) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa620bf3, 0x47}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x820, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={0xffffffffffffffff}}, 0x4000004) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x3c}}}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cfdd8b2297540c43"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3299e4f0b7c27c1da3462477f97b4b5755141d7f29400fc0c278b1ad544dfcde"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "621b966e23d88724"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x6c, r0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "d609bd711fb3b93d62f4ef52"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = socket(0x10, 0x6, 0x5) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x98, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0xd}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3f}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x42}, @NL80211_ATTR_FRAME_MATCH={0x67, 0x5b, "cc9982abd40f872e14e299ca1fbaa0a5740d6e0d4931ce31bb6e9e65ca7d66c9d3484ab4cfba3090d9cdf1d9c714684e9a3fb0b143b39a68b7b3bdc831053bbe85634bbb988e0cad7e9d186434240cd205a6bb1e5c4df80f74f4c888ead480bdb3a91c"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r5) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x80, r8, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f8b50cd252644ba6c1810bec21"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "afb85ed0c0"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040003}, 0x40) [ 86.753662] audit: type=1400 audit(1730830296.957:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:11:36 executing program 3: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "45a9cf52f523cc7b206d079fcd"}]}, 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x635}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffff, 0x80}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xb9, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4080002}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0xffffd345}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb731}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cc}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x69c54fea, 0xf59f, 0x5, 0x6, 0x8001, 0xffffffff, 0x7, 0x2]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3, 0x8001]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf9a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x44000000}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x810}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe0}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x1, 0x37970]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x48800) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4de9, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20040001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x8cc}, @device_b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x571f1e740f62889d) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0x100, 0x8000, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0ae681a26050"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4008010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r3, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xa40c}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a089a8eb4f74"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x19) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x5) socketpair(0xf, 0x3, 0x4, &(0x7f0000000c80)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048004}, 0x4c080) socketpair(0x2, 0x4, 0x68c, &(0x7f0000000e00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x1c}}, 0x20000000) 18:11:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x10, {0x2, 0xfff, 0x1ff}}}, @NL80211_ATTR_SSID={0x16, 0x34, @random="a54753955eaa70cc1b53b347227f9a8b818a"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x6, 0x0, {0x1, 0x9, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x7, 0x7f}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x1, 0x0, {0x7ff, 0x40, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x268eff03, 0x4}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x8050) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14, 0x80800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x840c200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r3, 0x8, 0x70bd26, 0x5, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x44851) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24040801) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8b5d33bd0040a0d5}, 0xc4) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb8, r3, 0x205, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xff}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x48, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x34, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x400}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random='p'}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1ff}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2400c041}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1871220}, 0xc, &(0x7f0000000f40)={&(0x7f0000000bc0)={0x380, r6, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x985a, 0x4c}}}}, [@NL80211_ATTR_TESTDATA={0x49, 0x45, "2e72e53dba78470116d91c3c8a6f3dd6465b6b278f37d8831f83fbc5d80cdf2912c8c351e6cf8de63f03cfe26f2c8521d96a31f1f2a840d6f5c7adc4ae68a4408bf067975e"}, @NL80211_ATTR_TESTDATA={0x8c, 0x45, "9dc73caa0faad5fef7dec39e4b87300b73540f7175d177ad3b7446a3ee8c2bab20ab4a147832983b5f46833af791c0f240a6b40f70666d6dd7d4ec774cfee765a569152d10ccafd1f1ed94d8c9dab291f5cc528f41011c2344ff261d63ea50a09e2bba9c24d85479ae316b894c27229d8ee2e754e1bff23ab2a023327dd2b768ac777d03d088151d"}, @NL80211_ATTR_TESTDATA={0xe6, 0x45, "312af3f393f976a3c6e071a4c5d5ad653cbdcb0840dd7d1d27202dd508de0071d7e0eede2c766e4201c464fe8f26685324f5545e0b843072efa7ac0ca30964dc916af2ab21ddb9e61e6838bb0f029d3d1011f6d87a2d064f863077da6016f8025504a7089b17e7b36e77afa1faf9881b40587d527ec06e857d19f1e68ec9e290f3fe2495cdc5b779f5074004302f83b6f6dc3816af08da146bd977a58f7bd6d484ae7238f2b3a00843f8307cf6f0083fd328b95b48c586a5740aa206ed62c96176aeba3f5b090d41e5e05bbfa413b98fc2f65e2f8da7a6e391020f46b0e352e92ec0"}, @NL80211_ATTR_TESTDATA={0x3b, 0x45, "853439419a2b97df492a61c8a3e2577f7704c3039153a20816442906e767ffff2a1891d55c0c399c670b9bb16e1dda325b04f07e0e27e8"}, @NL80211_ATTR_TESTDATA={0x9, 0x45, "5864b7a03e"}, @NL80211_ATTR_TESTDATA={0xbf, 0x45, "fd65382ca57b00963a610ed1e71c380f100b188c6e8ca9d6502044ac312235b36784b65679abb695b96bad379729326febea88e3dba5fc48da7be8e5288b6a1243ef6eea412904623853d853c58af952954b07894cc3efe16bbbd36a2d90e0bbac2f8993d3a30b12e51d9677ddb44e07b1bcb544f6d91ba3d8bcc0473375bad9a4661d9ebe148c0b3934ebd9bccde6d0ec98d722ff8951760d0c686a26be492ae91376f6e96ab3e33fdcbf1f5eef9bea9b364a6ea103791e91cd77"}, @NL80211_ATTR_TESTDATA={0x98, 0x45, "4f6b447c72ffb673e47bbd7b92bd58d28ad015d81449c4ec4ed8b07add528a6dbbad3e33f733aed01b0526ae26e7ec2d5dd8ed40af1ff7559f04179b711139940b7811612931b9304e6f6d83b9a706598b482080863bf2d0ed02320365eef078bd83958f3f14bff3dcd3563f730567de5b78494ff04e7d762b0f720d458f6f2db7f2c8c059c224680751f0c328fc42f231cd9a60"}]}, 0x380}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000c) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000fc0), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000001000)='THAWED\x00', 0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r8, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x41) 18:11:36 executing program 5: sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xb26, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x77}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x1) socketpair(0x2b, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x41}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xe8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd304}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000044}, 0x200000c1) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc4, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x80000001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa8a6f43}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x198}, @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x255e}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0xc4}, 0x1, 0x0, 0x0, 0xc090}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ba521be0fa4a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000885}, 0x0) r6 = accept4$packet(r1, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14, 0x80800) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000a40)=0x9e1b, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r7, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x242c, 0x11}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x22}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000804) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x3a1a01, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x26f5}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20040804) 18:11:37 executing program 7: socketpair(0xb, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x114, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x42}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000805}, 0x4000041) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req={0x8, 0x3, 0x80000001, 0x401}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xbe8, 0x4a}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x40}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x3}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x42000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x264, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa1c}, @NL80211_ATTR_FRAME={0x11f, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0x5}}, @ver_80211n={0x0, 0x8, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x0, @random=0x2, 0x8c21, @void, @val={0x1, 0x4, [{0x30}, {0x3, 0x1}, {0x2}, {0x12, 0x1}]}, @val={0x3, 0x1, 0x5}, @void, @val={0x6, 0x2, 0x7ff}, @void, @val={0x25, 0x3, {0x1, 0xad, 0x42}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x7c, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x28}}, @val={0x76, 0x6, {0xad, 0x20, 0x2a, 0x6}}, [{0xdd, 0xc5, "2a5a5643b719a80975d8375429eda7e5e4baf6e12b82e6af7dd35ebc5f5a6aaa44a1344031dbb71ed0a00b6dec1c6657837ea37374675628247926fb1ae6654927b91be430d800f8d04ee1ba37884acf851dca2ae830e933a8b3dbb1f86410ddad9d3e5eaf15d30818acce778a089af422b123bb649725b61173d5225408f689660610571b59a8d548d04b57731c08b7268016cad15396849f3e8d421c0eeba760378c835e42d456b77de26fd29dc1da5cc3159ee44270824beaa44632c4c8ea213a227c9f"}]}}, @NL80211_ATTR_FRAME={0x102, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x40}, @device_a, @device_b, @initial, {0x0, 0x3}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @val={0x84, 0xe2, {0x3f, 0xe, [@not_ext={{}, @device_a, 0xfffffffb, "", 0x4}, @ext={{}, @device_b, 0x2, @broadcast, 0x40}, @not_ext={{}, @broadcast, 0x9, "", 0x37}, @ext={{}, @broadcast, 0x4a6, @broadcast, 0x34}, @ext={{}, @broadcast, 0x3, @broadcast, 0x40}, @not_ext={{}, @device_a, 0xffff, "", 0x7}, @not_ext={{}, @device_a, 0x8000, "", 0x1c}, @ext={{}, @broadcast, 0x82, @device_b, 0x13}, @not_ext={{}, @device_a, 0x10000, "", 0xd}, @ext={{}, @broadcast, 0x5, @device_b, 0x7}, @not_ext={{}, @broadcast, 0x3, "", 0x1d}, @ext={{}, @device_b, 0x9, @device_b, 0x1d}, @not_ext={{}, @device_b, 0x0, "", 0x32}, @ext={{}, @device_b, 0x81, @broadcast, 0x1}]}}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0xfff8, 0x4, 0x3f, 0x2c61, 0x7f, 0x9, 0x8]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) socketpair(0x2b, 0x3, 0x3ca4f198, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r7, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1c00, 0x43}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040015}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5a6b, 0x63}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3f}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x60}}, 0x40) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x21}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x8090) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="831e2bfc53a1"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4004) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000d40), 0x480000, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r6) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r11, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x53, 0xbe, "13c4aa7a2af08f37c857f036b14ab3ac23a391ee105592c1807d298ceb25e810a82b6698d0fdb01539aa5eb366e124ba76b7562a1049687da4cbcd0a377347dfdc7c43a41c9a04285ecdfee9e49b5a"}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 18:11:37 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x28}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004c080}, 0x4000) r2 = openat$cgroup_int(r0, &(0x7f00000002c0)='memory.swap.max\x00', 0x2, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r3, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x47}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, 0xfffffffffffffffc, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x13000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x2e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8051) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r4, 0x400, 0x70bd26, 0xff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000098}, 0x20010002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4080) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}}, 0x20040010) socketpair(0x11, 0x5, 0x1, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r4, 0x800, 0x70bd26, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7ff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) [ 88.224618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.225834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.227448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.228524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.229397] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.232357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.234097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.235967] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.236768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.237617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.238960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.240317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.243022] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.244582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.245589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.263504] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.264029] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.268064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.270298] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.271113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.273875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.275112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.276444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.278383] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.279405] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.282852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.283023] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.284552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.284576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.300701] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.309916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.313112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.316488] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.319422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.322347] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.323568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.329032] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.329993] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.331178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.331943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.335681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.341579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.344337] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.345931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.346810] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.348089] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.351648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.356453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.298093] Bluetooth: hci1: command tx timeout [ 90.298283] Bluetooth: hci0: command tx timeout [ 90.363275] Bluetooth: hci3: command tx timeout [ 90.363286] Bluetooth: hci6: command tx timeout [ 90.425508] Bluetooth: hci2: command tx timeout [ 90.425618] Bluetooth: hci7: command tx timeout [ 90.428080] Bluetooth: hci4: command tx timeout [ 90.428406] Bluetooth: hci5: command tx timeout [ 92.345332] Bluetooth: hci1: command tx timeout [ 92.346791] Bluetooth: hci0: command tx timeout [ 92.409329] Bluetooth: hci6: command tx timeout [ 92.410033] Bluetooth: hci3: command tx timeout [ 92.473400] Bluetooth: hci7: command tx timeout [ 92.473930] Bluetooth: hci5: command tx timeout [ 92.474511] Bluetooth: hci2: command tx timeout [ 92.474986] Bluetooth: hci4: command tx timeout [ 94.393322] Bluetooth: hci0: command tx timeout [ 94.393851] Bluetooth: hci1: command tx timeout [ 94.457581] Bluetooth: hci6: command tx timeout [ 94.458128] Bluetooth: hci3: command tx timeout [ 94.522241] Bluetooth: hci2: command tx timeout [ 94.522752] Bluetooth: hci4: command tx timeout [ 94.523295] Bluetooth: hci5: command tx timeout [ 94.523765] Bluetooth: hci7: command tx timeout [ 96.442013] Bluetooth: hci1: command tx timeout [ 96.442051] Bluetooth: hci0: command tx timeout [ 96.505286] Bluetooth: hci3: command tx timeout [ 96.505344] Bluetooth: hci6: command tx timeout [ 96.569335] Bluetooth: hci7: command tx timeout [ 96.569392] Bluetooth: hci4: command tx timeout [ 96.569854] Bluetooth: hci2: command tx timeout [ 96.570868] Bluetooth: hci5: command tx timeout [ 151.204969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.206252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.207687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.209124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.210150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.211285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.212401] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.213287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.214558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.218531] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.218799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.221556] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.221590] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.224900] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.229558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.230473] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.232853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.233671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.241328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.244573] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.245913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.249693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.251144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.252689] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.253694] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.254685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.255784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.263533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.273070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.276691] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.277783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.289638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.295472] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.302828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.315408] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.316628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.317593] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.340586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.342483] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.343883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.346982] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.349477] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.350445] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.351652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.352580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.365414] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.377015] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.387254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.273355] Bluetooth: hci3: command tx timeout [ 153.273377] Bluetooth: hci0: command tx timeout [ 153.338356] Bluetooth: hci4: command tx timeout [ 153.338856] Bluetooth: hci1: command tx timeout [ 153.339331] Bluetooth: hci2: command tx timeout [ 153.401308] Bluetooth: hci6: command tx timeout [ 153.401605] Bluetooth: hci5: command tx timeout [ 153.466397] Bluetooth: hci7: command tx timeout [ 155.321941] Bluetooth: hci0: command tx timeout [ 155.322466] Bluetooth: hci3: command tx timeout [ 155.385397] Bluetooth: hci1: command tx timeout [ 155.385505] Bluetooth: hci4: command tx timeout [ 155.386476] Bluetooth: hci2: command tx timeout [ 155.449326] Bluetooth: hci5: command tx timeout [ 155.452305] Bluetooth: hci6: command tx timeout [ 155.513365] Bluetooth: hci7: command tx timeout [ 157.369273] Bluetooth: hci3: command tx timeout [ 157.369308] Bluetooth: hci0: command tx timeout [ 157.433284] Bluetooth: hci2: command tx timeout [ 157.434295] Bluetooth: hci4: command tx timeout [ 157.434812] Bluetooth: hci1: command tx timeout [ 157.500239] Bluetooth: hci6: command tx timeout [ 157.501842] Bluetooth: hci5: command tx timeout [ 157.561349] Bluetooth: hci7: command tx timeout [ 159.417273] Bluetooth: hci0: command tx timeout [ 159.418891] Bluetooth: hci3: command tx timeout [ 159.481526] Bluetooth: hci2: command tx timeout [ 159.483325] Bluetooth: hci1: command tx timeout [ 159.483415] Bluetooth: hci4: command tx timeout [ 159.545415] Bluetooth: hci5: command tx timeout [ 159.545687] Bluetooth: hci6: command tx timeout [ 159.609287] Bluetooth: hci7: command tx timeout [ 213.382594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.388053] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.398679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.413670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.426566] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.428451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.507911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.513742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.519692] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.525507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.527591] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.528701] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.570739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.593482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.602541] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.630680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.652450] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.656427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.728203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.732357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.750148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.751377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.752737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.756761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.761840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.765331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.770573] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.771486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.778061] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.778090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.780207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.781528] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.784425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.787472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.823055] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.823574] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.825059] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.837439] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.844223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.858795] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.860905] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.865681] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.872453] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.875073] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.876698] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.923746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.925561] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.927105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.481265] Bluetooth: hci0: command tx timeout [ 215.609557] Bluetooth: hci1: command tx timeout [ 215.801298] Bluetooth: hci2: command tx timeout [ 215.866255] Bluetooth: hci5: command tx timeout [ 215.866948] Bluetooth: hci3: command tx timeout [ 215.930231] Bluetooth: hci4: command tx timeout [ 215.993432] Bluetooth: hci6: command tx timeout [ 215.994462] Bluetooth: hci7: command tx timeout [ 217.529354] Bluetooth: hci0: command tx timeout [ 217.657273] Bluetooth: hci1: command tx timeout [ 217.849426] Bluetooth: hci2: command tx timeout [ 217.913390] Bluetooth: hci3: command tx timeout [ 217.913927] Bluetooth: hci5: command tx timeout [ 217.977293] Bluetooth: hci4: command tx timeout [ 218.041664] Bluetooth: hci7: command tx timeout [ 218.042251] Bluetooth: hci6: command tx timeout [ 219.577348] Bluetooth: hci0: command tx timeout [ 219.707231] Bluetooth: hci1: command tx timeout [ 219.897233] Bluetooth: hci2: command tx timeout [ 219.961248] Bluetooth: hci3: command tx timeout [ 219.961744] Bluetooth: hci5: command tx timeout [ 220.025321] Bluetooth: hci4: command tx timeout [ 220.090227] Bluetooth: hci6: command tx timeout [ 220.090717] Bluetooth: hci7: command tx timeout [ 221.625367] Bluetooth: hci0: command tx timeout [ 221.755213] Bluetooth: hci1: command tx timeout [ 221.945357] Bluetooth: hci2: command tx timeout [ 222.009260] Bluetooth: hci5: command tx timeout [ 222.009756] Bluetooth: hci3: command tx timeout [ 222.073763] Bluetooth: hci4: command tx timeout [ 222.139210] Bluetooth: hci7: command tx timeout [ 222.139693] Bluetooth: hci6: command tx timeout [ 275.716538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.720330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.723944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.730907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.733756] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.736343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.854084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.856865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.859395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.869130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.871912] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.874028] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.943620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.964874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.987447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.029927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.042349] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.044592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.077414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.081272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.085015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.090557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.096384] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.103440] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.150763] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.156288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.164926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.198881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.205119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.206306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.208750] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.209920] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.210580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.215387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.218648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.223517] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.225534] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.229460] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.234242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.248721] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.250957] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.252043] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.357705] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.361297] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.362495] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.366777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.368295] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.369356] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.754332] Bluetooth: hci0: command tx timeout [ 277.946252] Bluetooth: hci1: command tx timeout [ 278.139197] Bluetooth: hci3: command tx timeout [ 278.202586] Bluetooth: hci2: command tx timeout [ 278.394294] Bluetooth: hci6: command tx timeout [ 278.396402] Bluetooth: hci4: command tx timeout [ 278.523209] Bluetooth: hci5: command tx timeout [ 278.969238] Bluetooth: hci7: command tx timeout [ 279.802270] Bluetooth: hci0: command tx timeout [ 279.993285] Bluetooth: hci1: command tx timeout [ 280.185416] Bluetooth: hci3: command tx timeout [ 280.249329] Bluetooth: hci2: command tx timeout [ 280.441238] Bluetooth: hci6: command tx timeout [ 280.441805] Bluetooth: hci4: command tx timeout [ 280.571186] Bluetooth: hci5: command tx timeout [ 281.017218] Bluetooth: hci7: command tx timeout [ 281.849281] Bluetooth: hci0: command tx timeout [ 282.041402] Bluetooth: hci1: command tx timeout [ 282.234835] Bluetooth: hci3: command tx timeout [ 282.298307] Bluetooth: hci2: command tx timeout [ 282.489280] Bluetooth: hci4: command tx timeout [ 282.490776] Bluetooth: hci6: command tx timeout [ 282.618202] Bluetooth: hci5: command tx timeout [ 283.066251] Bluetooth: hci7: command tx timeout [ 283.898371] Bluetooth: hci0: command tx timeout [ 284.089231] Bluetooth: hci1: command tx timeout [ 284.281251] Bluetooth: hci3: command tx timeout [ 284.346427] Bluetooth: hci2: command tx timeout [ 284.539411] Bluetooth: hci4: command tx timeout [ 284.539935] Bluetooth: hci6: command tx timeout [ 284.665238] Bluetooth: hci5: command tx timeout [ 285.114431] Bluetooth: hci7: command tx timeout [ 338.056076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.060973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.064717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.068324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.073975] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.081319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.116566] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.118032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.121616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.125890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.127857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.129226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.313019] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.315387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.316763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.320065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.323055] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.324419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.372963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.385341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.392352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.413382] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.417492] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.418752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.503735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.505079] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.510454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.517416] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.520419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.523548] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.617260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.620356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.621946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.626372] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.630488] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.632289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.692291] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.695665] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.696953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.699596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.701288] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.702425] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.710434] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.728459] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.751294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.757697] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.821984] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.843442] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.153264] Bluetooth: hci1: command tx timeout [ 340.154241] Bluetooth: hci0: command tx timeout [ 340.345262] Bluetooth: hci2: command tx timeout [ 340.473417] Bluetooth: hci3: command tx timeout [ 340.665301] Bluetooth: hci5: command tx timeout [ 340.729281] Bluetooth: hci6: command tx timeout [ 340.730371] Bluetooth: hci4: command tx timeout [ 340.985239] Bluetooth: hci7: command tx timeout [ 342.201368] Bluetooth: hci0: command tx timeout [ 342.201883] Bluetooth: hci1: command tx timeout [ 342.394185] Bluetooth: hci2: command tx timeout [ 342.521288] Bluetooth: hci3: command tx timeout [ 342.713235] Bluetooth: hci5: command tx timeout [ 342.777264] Bluetooth: hci4: command tx timeout [ 342.777774] Bluetooth: hci6: command tx timeout [ 343.033281] Bluetooth: hci7: command tx timeout [ 344.249248] Bluetooth: hci1: command tx timeout [ 344.249771] Bluetooth: hci0: command tx timeout [ 344.441279] Bluetooth: hci2: command tx timeout [ 344.569227] Bluetooth: hci3: command tx timeout [ 344.761486] Bluetooth: hci5: command tx timeout [ 344.825524] Bluetooth: hci6: command tx timeout [ 344.826039] Bluetooth: hci4: command tx timeout [ 345.082199] Bluetooth: hci7: command tx timeout [ 346.297222] Bluetooth: hci0: command tx timeout [ 346.297739] Bluetooth: hci1: command tx timeout [ 346.489218] Bluetooth: hci2: command tx timeout [ 346.617194] Bluetooth: hci3: command tx timeout [ 346.809382] Bluetooth: hci5: command tx timeout [ 346.873635] Bluetooth: hci4: command tx timeout [ 346.874170] Bluetooth: hci6: command tx timeout [ 347.129263] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:16:46 Registers: info registers vcpu 0 RAX=ffff88800eab4498 RBX=ffff88800ccab578 RCX=ffffffff81813eab RDX=1ffff110012161f3 RSI=ffffffff8176d43f RDI=ffff88800eab4468 RBP=dffffc0000000000 RSP=ffff8880348e7718 R8 =0000000000000001 R9 =ffffed1001216205 R10=0000000000000020 R11=ffff8880222584a8 R12=000000000000001b R13=0000000000000017 R14=ffff88800eab4460 R15=ffff8880348e7808 RIP=ffffffff8151d954 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff01ced33c0 CR3=000000001652c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000ff000000 XMM02=0000000000ff00000000000000ff0000 XMM03=0000ff00000000000000000000ff0000 XMM04=00ff0000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=000000000000000c RCX=ffffffff812fc914 RDX=fffffbfff0fdc5e5 RSI=0000000000000008 RDI=ffffffff87ee2f20 RBP=ffff88802e900000 RSP=ffff888032a5fbb8 R8 =0000000000000000 R9 =fffffbfff0fdc5e4 R10=ffffffff87ee2f27 R11=00000000000c33ea R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff88802e900a40 RIP=ffffffff812fc91c RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe86b2f6540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005579cccac4c8 CR3=0000000030a84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2e7473696c6b63616c622d7665646266 XMM01=00666e6f632e7473696c6b63616c622d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000