Warning: Permanently added '[localhost]:24923' (ECDSA) to the list of known hosts.
2024/11/25 15:40:09 fuzzer started
2024/11/25 15:40:10 dialing manager at localhost:44579
syzkaller login: [   95.746973] cgroup: Unknown subsys name 'net'
[   95.870205] cgroup: Unknown subsys name 'cpuset'
[   95.891929] cgroup: Unknown subsys name 'rlimit'
2024/11/25 15:40:31 syscalls: 209
2024/11/25 15:40:31 code coverage: enabled
2024/11/25 15:40:31 comparison tracing: enabled
2024/11/25 15:40:31 extra coverage: enabled
2024/11/25 15:40:31 setuid sandbox: enabled
2024/11/25 15:40:31 namespace sandbox: enabled
2024/11/25 15:40:31 Android sandbox: enabled
2024/11/25 15:40:31 fault injection: enabled
2024/11/25 15:40:31 leak checking: enabled
2024/11/25 15:40:31 net packet injection: enabled
2024/11/25 15:40:31 net device setup: enabled
2024/11/25 15:40:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/25 15:40:31 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/25 15:40:31 USB emulation: enabled
2024/11/25 15:40:31 hci packet injection: enabled
2024/11/25 15:40:31 wifi device emulation: enabled
2024/11/25 15:40:31 802.15.4 emulation: enabled
2024/11/25 15:40:31 fetching corpus: 0, signal 0/0 (executing program)
2024/11/25 15:40:33 starting 8 fuzzer processes
15:40:33 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x4300)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x5, "53ea51c6a52bf5"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001040)={{r1, 0x8, 0x4, 0x200, 0x8cf6, 0xfffffffffffff001, 0x10000, 0x10001, 0x0, 0x80000000, 0xe6, 0x2, 0x41d, 0x1, 0x9}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x10, 0x3f2, 0x2, 0x70bd2a, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040800}, 0xa056)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x8000, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xa4, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff0001, 0x6d}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x200}, @NL80211_ATTR_PMKID={0x14, 0x55, "45eb2b01e21ecfc669f523f0262fa066"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "aa170fdb1dffb343f39fcb94603d3cf1"}, @NL80211_ATTR_PMKID={0x14, 0x55, "6f49fa423d112fd7bbab02618c5be09c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "60e7c2c00b5da7145d3e29e18feff5f9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0b865bd5186b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0xa4}}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48004)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000015c0)={&(0x7f0000001500), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100001a, 0x40010, r2, 0x8000000)
syz_io_uring_submit(r4, 0x0, &(0x7f0000001600)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x100)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r5, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080)
r7 = openat$cgroup_ro(r0, &(0x7f00000017c0)='io.stat\x00', 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(r7, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x10, 0x3f5, 0x800, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc811}, 0x84)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x64, r5, 0xc13, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x400, 0x29}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x24048415}, 0x4081)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001c80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a80)={0x1b0, r5, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1f}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x7, 0x0, {0x0, 0x9, 0x0, 0x3}, 0x1, 0x1, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x3, 0x0, 0x0, {0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x2, 0xfc}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_KEYS={0x12c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "7cebfe9da5bd8784"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7863039b4b84e0e374d82ae0b2"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "6af7f3b6ba"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3abfa5a2d5558565e3baa7166c"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "aab115fafddb37f3397b08be93e9"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x9, 0x4, "4c5a0cfe05"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f2e39c9f7dade59a9dfaeefedc"}]}]}, @NL80211_ATTR_SSID={0xb, 0x34, @random="0395a865b688dd"}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d40)={0x190, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x81}, @NL80211_ATTR_IE={0x131, 0x2a, [@challenge={0x10, 0x1, 0x13}, @tim={0x5, 0x51, {0x8, 0x8, 0x6, "370316552113d10ec75575a548955d49af3b244cf495dcfa57226f9dbfb9acabf2b3e133c77963029362e287682b51383d1a5aba4d36ac8e85615111d48a8008c44ddae1cb80e9e31d3818675ef9"}}, @fast_bss_trans={0x37, 0xcd, {0x9, 0x6, "8b1ae017bcab18dc53ed7a03d8138083", "50d38e0ab747e35df6ee9c096b6e84cbe24be1ce43b53dd292b7c189bb83f9c0", "14ee49266f51263467084813baa422564f97675e5af6b77418d87669eba20f14", [{0x2, 0xb, "45a9e706fe5831d73b887b"}, {0x4, 0x19, "66aefc0670078dfacb0417ce9575bdc3ad7145f577644ad0e8"}, {0x1, 0xe, "fc48b851fe3979923f45d9bfe44e"}, {0x2, 0x1a, "2fd871ded1ff30ba97414fbab7b5006e88cc2b199a4e581fe7be"}, {0x1, 0x13, "c16b3edc85ade10f8920934050110b1625a7a5"}, {0x1, 0x10, "6a6fc1e539a2932b4a1ff30ef449fe02"}]}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x80, 0x10, 0x6}}]}, @NL80211_ATTR_IE={0x1c, 0x2a, [@challenge={0x10, 0x1, 0xc9}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mic={0x8c, 0x10, {0xbb8, "75054fae66e3", @short="1abac638fdb0adca"}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x90}, 0x10)

15:40:33 executing program 3:
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x420, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x42}, 0x8004)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x810, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x4000890)
epoll_create1(0x0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xa8, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x80}, @initial, @device_b, @broadcast, {0x5, 0x2}}, @a_msdu=[{@broadcast, @broadcast, 0x7d, "8ae5fa37a1f823a21031a727886c982bea9b9960c6291eac88d89de84409dee9396148cecaa6f196c53c9a3ac195d57769fe64ed13d7a50a8ca00736e02eb67710976fefed5cfbae62fac5f2d9cdbc1c8bcfd8531e6101e39183300a850d8eb8098f941ba034797896dc0352c592ffa0cc5206f4fd14a724af58d82405"}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r1 = socket(0xa, 0x6, 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r2, 0xb00, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000004}, 0x20004005)
socketpair(0x23, 0x4, 0x1, &(0x7f0000000580)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="cec96c5dd1ef"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x719}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x178}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x2000080)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cgroup.kill\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd0, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x96, 0x2a, [@dsss={0x3, 0x1, 0x9d}, @random_vendor={0xdd, 0x85, "d867f76826e8f573b0592d04fb09520cf91ab0e592d4e81173fe62eb2a63362b3bcc2eef945258cd3f8a62bdb2409600fa2dcd28c696c81384c0da518f2fc5ab9ce1e66b3918561149e1d2f14801d4e706029ba15644f0f2822853cee9fa1ec618652a296e67488f49a728d3394a48d38e551fe139bc1a3848159a367c3c8d06cb29fa0587"}, @cf={0x4, 0x6, {0xf0, 0xff, 0x7ff, 0x4}}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffff7f}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040)
connect$bt_l2cap(r1, &(0x7f0000000a80)={0x1f, 0x0, @any, 0x374, 0x2}, 0xe)
socketpair(0x3, 0x800, 0x31, &(0x7f0000000ac0)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000000e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b80)={0x268, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x100, 0x8}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc8, 0xfc, "9dad22ff2bf0af0235aced6d59fd67ad33824762188825bfc1cbf1c34f4abef197bec5348599c02b9eeb22f3f63d5c698e22766dfcbea72e207c6bf046a102d59b706d9d869a07a1b79d72ef854a831e9023c877527f9bd1da708f5fa30e8d50816562ecf2f3bfabce4ceee1a38f7f99248a1ccbbe4cdcb98148097eaf24b41c855912340983ac8b91d20a351dd8032ed78d620ff2741f86e6d3b351e28a43f3de43e18148e2f2f4e34124505ed07e44e77ccd6d6b876b8c85d0d6f735f808530921c0e3"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}], @NL80211_ATTR_IE={0x34, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x4, @device_b, 0xffffff7f, "", 0x1000, 0x10001, @device_b}}, @sec_chan_ofs={0x3e, 0x1}, @ibss={0x6, 0x2, 0x8}, @mesh_id={0x72, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xe5, 0xfa, "4ce3663b2579bb0457a76b5b95e3e1095695b22f8c996e12a2d6a454a0dad5c34920dcc121fb5fc166ee1b333e7bc036c7bf2740620d6ef6eb7556e6133303cb61dc262aa03348227ced0df1b5c901ce2b560fd9259d5f5882377231b57f522636e01f6b5f81b20a58e9d53db43670ec37a86c5dd4659e4da1fc9abb0423b6f7394f530195a03ad5aca791194d53c6cae5beb672b3e9773d4d5370ec94f8b8fab9a47eac9eb9e5482b39e1ec06fb7646eeae0c5cd745b3d142bb64f65ab2cb1143bad275384e3269488345e1a9d39e1ab6599b23f70396d9d47e513b2b4531a595"}, @NL80211_ATTR_FILS_ERP_REALM={0x4e, 0xfa, "5a7b711c096234c7132dd323e29253ad31855e4a420d6b8fa19236e64be86fe644a81d685676a7699a7edb37fcb07f1badc6d38efdcc0a2e3d8097d483b02c5b6c1a863d9a313dc464b0"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x98ef}]]}, 0x268}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, r0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x804)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x50, r4, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040800}, 0x24000000)

15:40:33 executing program 4:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd, 0x3, 0x9, 0xfffffff8, 0x1e, 0x1, {0x1}}, 0x5)
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000040)={0x80, 0x80000001, 0x2, 0x2, 0x4b, 0x5, 0x8, 0x1}, &(0x7f0000000080)={0x101, 0x7, 0x37d3, 0x4, 0xfffffffffffffffb, 0x3, 0x80000001, 0xffff}, &(0x7f00000000c0)={0xffffffffffff8000, 0xffffffffffffffff, 0x80, 0x0, 0xb860, 0x2, 0x768b269e, 0x101}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x10, 0xffffffffffffffff, 0x8000000)
prctl$PR_SET_TIMERSLACK(0x1d, 0x7104)
prctl$PR_SET_TIMERSLACK(0x1d, 0x5)
r2 = socket(0x1f, 0x2, 0x8001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x6b}}}}, ["", "", ""]}, 0x28}}, 0x4040080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x78}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040)
pselect6(0x40, &(0x7f0000000480)={0x1ff, 0x5, 0x7, 0x5ba5, 0x400, 0x2, 0xfd2, 0x8}, &(0x7f00000004c0)={0x6, 0x2, 0x6, 0x0, 0xfffffffffffff169, 0x49c19874, 0x6, 0x7}, &(0x7f0000000500)={0xa42b, 0x2, 0x3, 0x7, 0x1f, 0xfffffffffffffffe, 0x3, 0x8}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x1]}, 0x8})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r6)
r7 = socket(0x22, 0x4, 0xd7c1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2)
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r8, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x91}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3b5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r7)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x74}}}}, ["", "", "", "", ""]}, 0x28}}, 0x40000)

15:40:33 executing program 2:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xeb1, 0x3c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xc002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x273}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004840}, 0xc000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x71}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x18, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe60}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3f}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2326}, {0x8, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x30040081}, 0x40001)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000500)={0x894, r3, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x132, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random_vendor={0xdd, 0x9a, "7b4a66e82682d2cf6c27ef796caac3675336ad395f51f8582a02ed2fb3ae73a3a186991f9759a0fa6845ce0384e931e384cf6f37fb48b59beeebf14dc7f67dfd278c98640efea22498e2384e32f09b4f92dfea8ae4fae3dd1e98e3aebcf09624bd0045bc569fe6f8d8e5ab5ef7f4dd0035afbfc8d667bc057559784f190c696a98b73e1ee6f2e3b246f8225112b625b53e17657f6aa823abbd65"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0xb0, 0x9}}, @ibss={0x6, 0x2, 0x7f}, @measure_req={0x26, 0x46, {0x4, 0x1f, 0x6, "95aa922433fc1a6956f0a0e24fad9443fe5e297d65bd7c9c1bfca704630db173f1344b24f80a8dd4cf666f4b8b7e3e59c04c86f650413708f827a0df22e2cd2c54bac8"}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x18, {0xd8a, "51f651074a84", @long="6de427fc752087b2c226dbbfe741f772"}}, @random={0x2, 0xd, "05d47c45e91b115b7fbd6d355c"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0xb3, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0x7c, 0x8}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0xe6, 0x2a, [@dsss={0x3, 0x1, 0x3a}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3f, 0xae, 0x3f}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x98, {0x40, 0x7, 0xb, "3a28f19e2651fbceab778744af9f5ab0b65a8a29e27fc955de4e146cf885a167ac330ddf9475de048a6def060ba15e4905708af09ba0e0e2f5ede088022a78f776ba8e7e160eaf1ba55704f26b7f223a671248b674961b9f0c81da894c61b957e69825f8c0e76f83b3c21742a47d1917b44ff9cf3d51665e280fa2361ca514318d9b6a492da57306fdaa14ff89e350f624c1844a92"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x4, [{0x4}, {0x1}, {0x5, 0x1}, {0xb}]}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0x9}}, @ht={0x2d, 0x1a, {0x4000, 0x3, 0x2, 0x0, {0x93, 0x0, 0x0, 0x360, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x2, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8001}, @NL80211_ATTR_IE={0x88, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @cf={0x4, 0x6, {0x20, 0x55, 0x0, 0x43b}}, @tim={0x5, 0x2f, {0x5c, 0xa2, 0xd, "97c67f8ff764ea0acc22132a3e5f239512c5d7e87c774032b5b74bda6c62062c72afe88f96487db19475d701"}}, @mic={0x8c, 0x18, {0x264, "12c6819ab68d", @long="9535b68afc8087a4f5d76442d1fed081"}}, @link_id={0x65, 0x12, {@random="26679d6d9a38", @broadcast, @device_b}}, @mic={0x8c, 0x18, {0x5e8, "2bee1d47aedc", @long="4e1820f58d328a929cefd4d3498e51f2"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_IE={0x1b4, 0x2a, [@challenge={0x10, 0x1, 0x8b}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @random_vendor={0xdd, 0xf7, "3cee1061ad7865ef04e8e7f281756b203fcbc52911dbf4ecc143fa67332d1ceed4e86a2f9c95f396a2b73c42ace4f44cf04d3a23938e1e7c43b4be7609369b643cca7321b7fc6b6262ca2abba6c8c91fc3d86a066a925605b7f4be5177f8058f4c20f6a397f8ea6098f12ec8cc139c1d66353182e8cb2250582cbc614fe6b574da60870c030c2faa83861c1b317a3aa112601d0cafc6d0865d9c3ac20f0afbcee04e8d9d232178488c645a1705e94175ff64107b2496f6a5eed3f960696fcfd95984a62f4f567a50709ef41af1c2db5200837373daa53f1ff0f1222e4f709b52f021267cf1737ddf80e3c187028ea71017c6187736ef83"}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x40, 0x9}}, @ibss={0x6, 0x2, 0x2}, @chsw_timing={0x68, 0x4, {0x7, 0x7}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x9, 0xdb, @broadcast, 0x8, 0x7ff, 0x6}}, @random_vendor={0xdd, 0x63, "fc3216b8f024cecae3af61812b80322535b3bde2264ee76db9115b472289e0959a44294c4bc152c1f092d93e1dff0693b55d9fa19eb85b63702539d2fefcefd0c61d5ba6d07a5dd7b377a7ef448c72cac47ead17ae185d7bdc51add94e42805b36ff8c"}, @ssid={0x0, 0x18, @random="cd24e1e3cb5152e5786a6227561935a520f08eec6cc1baa6"}]}, @NL80211_ATTR_IE={0x72, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x24, 0x7}}, @preq={0x82, 0x4c, @ext={{}, 0x7f, 0x1, 0x9, @device_b, 0xfcaa, @broadcast, 0xffffffff, 0xe84, 0x4, [{{0x1, 0x0, 0x1}, @device_a, 0x3}, {{0x1}, @device_a, 0x40}, {{}, @device_b}, {{0x0, 0x0, 0x1}, @device_b}]}}, @mic={0x8c, 0x18, {0xfc2, "455417ce376e", @long="2e179b21904c9f7ac4663e9e0ba37ac4"}}]}, @NL80211_ATTR_IE={0x396, 0x2a, [@perr={0x84, 0x115, {0x1, 0x11, [@not_ext={{}, @device_a, 0x2, "", 0x4}, @ext={{}, @broadcast, 0x7ff, @device_a, 0x3a}, @not_ext={{}, @device_a, 0x1, "", 0x5}, @ext={{}, @broadcast, 0x8, @device_a, 0x1c}, @ext={{}, @broadcast, 0x80000, @broadcast, 0x22}, @ext={{}, @broadcast, 0x13, @device_a, 0x16}, @not_ext={{}, @device_b, 0xcdcb, "", 0x25}, @not_ext={{}, @device_b, 0x7fff, "", 0x5}, @ext={{}, @device_b, 0x1, @broadcast, 0x2a}, @not_ext={{}, @device_a, 0x1000, "", 0x1d}, @ext={{}, @device_a, 0x6, @broadcast, 0x21}, @not_ext={{}, @device_b, 0x6, "", 0x10}, @ext={{}, @broadcast, 0x4, @device_b, 0x2d}, @not_ext={{}, @device_b, 0x0, "", 0x2b}, @not_ext={{}, @broadcast, 0xffffff01, "", 0x1}, @ext={{}, @device_b, 0x3, @device_a, 0x41}, @ext={{}, @broadcast, 0xffffffff, @device_b, 0xe}]}}, @measure_req={0x26, 0x85, {0x81, 0x5, 0xc0, "07a0590c3e590a3c0981e5d23203a3bc0983d60f4e1094e28ccca04b835624cce979eba3b55b619a2513c5342c15fea6328decbe8801336f9c90aa422adfa68b326b079898d7c4d6fbaf044bf8fcf248d51c38a394746c01f6a9b5de705854ee9f13e40711d9f0a42982b01ad44904b6282c30d518a90bcab827ca0bd4547f3e6937"}}, @fast_bss_trans={0x37, 0x79, {0x2, 0x1, "17820e509997d287910a319ce8a335c6", "f64c70723570fac9c942edd20acd60b59c7daedea8777e6929b31497ee1360d5", "b18421ee77d87db3a0c159afdc66103f190f83cf3164c91674fd7a7ce14d820c", [{0x1, 0x25, "805b1004fa770c6c85aad5f81c426b9ccb923ee1fe4a30e36949f06995ec03a1cf333d1254"}]}}, @peer_mgmt={0x75, 0x14, {0x1, 0x80, @void, @void, @val="090ce5e7ea36c4307b7b6a4c0fbc6329"}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x4, 0xfc, @broadcast, 0x7, 0x400, 0x7f}}, @cf={0x4, 0x6, {0x1, 0x1, 0x0, 0x1}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x123, {0x1, 0x7, "bd821dc7e4a39254e3ab9a9829828070", "fda68e5c0a675891ee9150b4254d1a27f5ede023cc35746ec68eda8930c67473", "e6ddc51987e23aa9add24ebc4758d0b276d636c2bafd3f00a7eae609ca5673d1", [{0x2, 0x1e, "379755a174196e7eb8a5c25e1c234b03d65571ee6acf7ef477ce0cfff3ec"}, {0x2, 0x12, "5cefe59dfdd0284590ad86ac87704d9db79e"}, {0x3, 0x18, "41d6db3c5196d62e6e6b10b329b8bfc925851303231b7772"}, {0x3, 0x1b, "302e57fc4998908f673329549fda8c93c135d6e304c631cd7b4f82"}, {0x2, 0x18, "b59a5ac6c6d8a7a2ea10a9cca6bb218b12809edb745df9d3"}, {0x4, 0x23, "f9a7ca2d1ead7227ce71fb6fde06a0c21b57345b361201f28759fdb02dae2635e42891"}, {0x1, 0x25, "1481aa95eb63216b9df5af36c52fe17b42b4130fc157de19756f23db87ca56752cf1e96b09"}]}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x9, 0x2, @broadcast, 0x1000, 0x6, 0x2}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x8004}, 0x20040080)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x68, r3, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x71, 0x3e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x77}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20044000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="09af6921d40f"}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000017c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001780)={&(0x7f0000001100)={0x650, r4, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x634, 0x11d, 0x0, 0x1, [{0x630, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x610, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0xfff8, 0x80, 0x6, 0x8, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x60, 0x3, 0x4, 0xc, 0xc, 0x1, 0x36, 0x1b, 0x1, 0x30, 0x18, 0x5]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x9, 0x60, 0x35, 0x60, 0x18, 0x3, 0x18, 0x2, 0xb, 0x6, 0x3, 0x18, 0x1b, 0x6, 0xb, 0x9, 0x30, 0x2, 0x1, 0x0, 0x18, 0x48, 0x30, 0x36, 0x3, 0x16, 0x24, 0x5, 0x16, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x5, 0x0, 0x8, 0x101, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0xc, 0xc, 0x48, 0xb, 0x6, 0x6c, 0x9, 0x1b, 0x5d, 0x3, 0x1b, 0x1, 0x0, 0x12, 0x1, 0x2, 0x9, 0x2, 0x48, 0xe, 0x36, 0x2, 0x2]}]}, @NL80211_BAND_6GHZ={0x13c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x93, 0x8, 0x80, 0x20, 0x3175, 0x1f, 0xfffe]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x9}, {0x4, 0x7}, {0x1, 0x14}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0x7}, {0x7, 0x2}, {0x7, 0xa}, {0x4}, {0x4, 0x4}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x1b, 0x4, 0x12, 0x36, 0x6c, 0x5, 0x60, 0x2, 0x6c, 0x3, 0x24, 0x6c, 0x48, 0x4, 0xb, 0xc, 0x1, 0x60, 0x6c, 0x2, 0x3, 0x1, 0x1b, 0x30, 0x30, 0x18, 0x2, 0x3, 0x4]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x5, 0x2, 0x9, 0x9, 0x4536bfa0583488c2, 0x1, 0x36, 0x24, 0x12, 0x60, 0x6, 0x6, 0x16, 0x36, 0xe, 0x60]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x7}, {0x6, 0x7}, {0x2, 0x4}, {0x5, 0x3}, {0x7}, {0x5, 0xa}, {0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x7, 0x6}, {0x5, 0x6}, {0x6, 0x4}, {0x1}, {0x6}, {0x1, 0x3}, {0x2, 0x7}, {0x5, 0x3}, {0x2, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x4}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x1}, {0x6}, {0x4, 0x7}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0x6}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfe00, 0x1000, 0x2d, 0x1, 0xffff, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x17, 0x401, 0x2, 0x227, 0x8001, 0x9]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0xf}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0x9}, {0x4, 0xa}, {0x6}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0x8}, {0x1}, {0x5, 0x7}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x6, 0x1}, {0x6, 0x7}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x7, 0x9}, {0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd1c, 0x0, 0x5dae, 0x2, 0x4, 0x400, 0x4d, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x6, 0x4, 0x3, 0x30, 0x48, 0x12, 0x5, 0xc, 0x6e, 0x6c]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x6}, {0x4, 0x6}, {0x3, 0x8}, {0x6, 0x9}, {0x4, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x2, 0x4}, {0x0, 0x2}, {0x4}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x40, 0x4, 0x1000, 0x0, 0x27, 0x3, 0x97e3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x7, 0x3, 0x3ff, 0xfff, 0x1f, 0x2, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0xc, 0x6c, 0x4e, 0x6c, 0x16, 0x18, 0x2, 0xc, 0x6, 0x0, 0x6, 0x24, 0x2, 0x30, 0x12, 0x6, 0x12, 0xb, 0x71, 0x48, 0x3]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x72, 0x4, 0x12, 0x18, 0x24, 0x36, 0x30, 0x4, 0x60, 0xc, 0x1b, 0x24, 0xb, 0x48, 0x36, 0x18, 0x6c, 0x3, 0x3, 0x36, 0x42]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x9, 0x6c, 0x1b, 0x6c, 0x5, 0x1b, 0x12, 0x30, 0x2, 0xc, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x80, 0x401, 0x9, 0x3ff, 0x401, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x9, 0xc, 0xb, 0x1, 0x60, 0x18, 0x48, 0x3, 0x30, 0x1, 0x12, 0x5, 0x6, 0x60, 0x0, 0x0, 0x60, 0x24, 0xb, 0x36, 0x16, 0x3, 0x24, 0x1b, 0x2, 0x48, 0x5, 0x60, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x0, 0x1, 0xe98a, 0x2, 0x1000, 0x4]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x7}, {0x6, 0x4}, {0x7, 0x3}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x5}, {0x2, 0x1}, {0x1, 0xa}, {0x4}, {0x5, 0x4}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x7}, {0x5}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x2, 0x2}, {0x2}, {}, {0x1}, {0x6, 0x4}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x5, 0x2}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x3}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x5, 0x9}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x14]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x2, 0x1, 0xc, 0x9, 0x30, 0x6c, 0x2, 0xb, 0x6, 0xc, 0x3]}]}, @NL80211_BAND_60GHZ={0x13c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0x0, 0x7, 0x0, 0x8, 0x1f, 0x6]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0xa}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x7}, {0x3}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0xa}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x4}, {0x2, 0xa}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x5, 0x2}, {0x3, 0x3}, {0x2, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x7, 0x3}, {0x7, 0x7}, {0x4, 0x8}, {0x7, 0x6}, {0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x3}, {0x5}, {0x3}, {0x4, 0x9}, {0x2, 0x9}, {0x4, 0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0x5}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x5}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x2}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf, 0x20, 0x6, 0x5, 0x6, 0x7fff, 0x0, 0x1f]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x4}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x5, 0x4}, {0x3, 0x2}, {}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x8}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x7, 0xa}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x9}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x8}, {0x3, 0xa}, {0x5, 0x6}, {0x4, 0xa}, {0x7, 0x9}, {0x7, 0xa}, {0x5, 0x6}, {0x1}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x2, 0xa}, {0x3}, {0x2, 0x8}, {0x6, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x9}, {0x3, 0x3}, {0x3, 0x6}, {0x3}, {0x7, 0x4}, {0x3}, {}, {0x7, 0x1}, {0x4, 0x4}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x6}, {0x6}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0x9}, {0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x4, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x6, 0xa}, {0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x1, 0x9, 0x1, 0xb, 0x24, 0xb, 0x4, 0x9, 0x9, 0x16, 0x6c, 0x3, 0x24, 0x5, 0x9, 0x1b, 0x30, 0x2, 0x0, 0x14, 0x18, 0x43, 0x48, 0x16, 0x16, 0x6, 0x30, 0x1b]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0xb, 0x60, 0x16, 0x6c, 0x12]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x24, 0x2, 0x3, 0xc, 0x48, 0x36, 0x60, 0x60, 0x2, 0x48, 0x30, 0x16, 0x2, 0x2, 0x16, 0x60, 0x6, 0x9, 0x36, 0x62, 0x36, 0x1, 0x6, 0x2, 0x24, 0x6, 0x48, 0x30, 0x1, 0x30, 0x24]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x2}, {0x4, 0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0xa}, {0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x9}, {}, {0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x1}, {0x6, 0x4}, {0x4, 0x8}, {0x1, 0x9}, {0x4, 0x8}, {0x7, 0x4}, {0x5, 0x6}, {0x6, 0x1}, {0x6, 0x2}, {0x4}, {0x6, 0x6}, {0x5}, {0x4, 0x6}, {0x4, 0x9}, {0x0, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x8}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {}, {0x7, 0xa}, {0x0, 0x6}, {0x3}, {0x7, 0x8}, {0x6, 0x8}, {0x3, 0x4}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x4}, {}, {0x2}, {0x2, 0x6}, {0x3, 0x7}, {0x7}, {0x5, 0xa}, {0x5, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x8}, {0x1}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x3}, {0x2, 0xb}, {0x0, 0x7}, {0x2}, {0x2, 0x9}, {0x6, 0x5}, {0x4, 0xa}, {0x4, 0x5}, {0x6}, {0x1, 0x6}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x3, 0x12, 0x1b, 0x4, 0x6, 0xb, 0x36, 0x2, 0x12, 0x5, 0x30, 0x30, 0x4, 0x0, 0x5, 0x9, 0x36]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xf, 0x5, 0x1, 0x1, 0x1, 0xc, 0x30, 0x3, 0x16, 0xb, 0x9, 0x36, 0xc, 0x6, 0x3e, 0x1, 0xc, 0x9, 0x5, 0x24, 0x18, 0x60, 0x3, 0xc, 0x12, 0x9, 0x4, 0x3e, 0x5, 0x16, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7834, 0x1ff, 0x200, 0x6, 0x6, 0x8, 0x7]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x6}, {0x7, 0x7}, {0x5, 0x2}, {0x0, 0x7}, {0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x2}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {}, {0x1, 0x5}, {0x3, 0x6}, {0x2, 0x5}, {0x7, 0x1}, {0x2, 0x5}, {0x4}, {0x6, 0x9}, {0x3, 0x3}, {0x5, 0x2}, {0x7}, {0x5, 0x4}, {0x5, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x7}, {0x6, 0x5}, {0x7}, {0x7, 0x5}, {0x0, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x7}, {0x6, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0xffff, 0xfff, 0x0, 0x7f, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf4e4, 0x81, 0x7, 0xafd, 0xad4, 0x6, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x2, 0x1000, 0xffff, 0x5, 0x2, 0xfcf7]}}]}]}]}]}]}, 0x650}, 0x1, 0x0, 0x0, 0x200008d1}, 0x40044)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001800))
socketpair(0x2c, 0x4, 0x1ff, &(0x7f0000001a00)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$AUDIT_LIST_RULES(r5, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x86}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x10, 0x3f5, 0x400, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000040)
socketpair(0x2c, 0x2, 0xfffff4e0, &(0x7f0000001b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r6)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x2c, r8, 0xc02, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x110}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x8080)

15:40:33 executing program 1:
r0 = socket(0x2b, 0x4, 0x7)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x8080)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x245c1ee2fd25cf70}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9100}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x883e}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd8d0}, 0x8004)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x10)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000e80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f00000004c0)={0x95c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x50b, 0x53}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x279}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7f]}, @NL80211_ATTR_FRAME={0x4aa, 0x33, @auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_b, @random="50242266af4b", {0x2, 0x1}}, 0x1, 0x0, 0x1e, @void, [{0xdd, 0xf5, "d6f7a6b50e04fc8d53d56c3d9f3010e81259f7d478dfb435cd0af3d739ad1ce4ff57102f949dfa449452ea59ae7033724a01c250ad93e3e7c08c14461b379eefcba4d74fd36b12b047c8957a25f04b73f0d22e2ddde7990c40aa128ce7a773b9538c5808baafae48c48ae4f6f249330b076155d9b033300fa461b7c85e7f8242be29e2800d33e4be298366dabb4bc14e2752e35867c778710f8693d4f21ad784c16186e2c12be0539b89fa4f6d8d13c24b794f32ba35a725043e2516ca41c650f16a40d2e206ee7905b0b1382c06870bbedf06bd8b895608b66c4f3721aef53f6ef5ef379a329fa1951121e0e117fd6745f5bae6a6"}, {0xdd, 0x5d, "92ea37b93a0b3c33caa4d3746e841d9fe6f5eab21ed40da5d7d0003d7da99b8f57d8b2757ee59f272e92787abd3934eb8f68af7dd8c86c2e991f380dd707a1eb888858f1dc10c0c5fa4c60dac118869ef329fd517a360cd3045448980d"}, {0xdd, 0xbb, "d79076f04112dea6a6dba9bd85b1a38221c550e9609b3be87f682b408586f05373614e8a539f037ee96dfcbaa619d00719ba6685be87ddb2064e27e7daa1b88cd33bb7dd56875655144dd20ecff4b573144b19a01b3ec7cdbac9ca98f7ed8b04645e890a8be93c6cbbf6aad8f1b8599dffec84c342c4355bbdba4cebdbecf48c64a6968061c48404e2f03a53f9227c521398d481349f2f73634ac33dc53bb9fc9f43632a7a8cca945f63ed6d0ffc590cca48021b34921251cf1198"}, {0xdd, 0x2d, "2c7622706600a4d1962e05e01e13dbb480bba3d924e205c4c0ba5ff5e39c9d23e87f9282df68de3204f84bb9b7"}, {0xdd, 0x1a, "bf2bd14af4e106ae0e96a166ffeaf5e31e8211fa18f6353e4de3"}, {0xdd, 0x56, "569d0956a41343ce162051fbf0009db0219d3ae7708c159c89977d7f3b3f9097bfdd7fcb84a55dbafcfb87114e80abbea94e890090942d0181bc5d77a857dd9dfb52ed51005569b6ddcea1fa4628437bb0f66801f51d"}, {0xdd, 0x50, "478ff81b5913d18547a5354f8f48547b54bff543cd11cf5a0b22c7feffb6b5e242c506f4859f3b5a1ebfaa1e0fca8151cb2312ac57c548a11a71938cd9a76cc69c0b23f0d5ea2c8468a58e55859a93d0"}, {0xdd, 0xd7, "160eae95a8a3b6215d4af05fcc5cfae203bc0fe47b1aa7583127d3a993062bdd540e0c9ea99c32bc3628f2104591fa032faf4e2c7ecf3dc57d91b463c17fdc9a4aee059f5d40e7c5521608032fec42e2d93a75db6e6f13820478fbad36cb43e325b3cbe887003898ae7dc6b94cfbc079298378186d5ad12576d83c92755203ac195a779d6fc77f6a530dfe4e960dbb4c0b9ae0867fc1d528f4ba927e7cb7c9307bfd9f76aac4a32a2990cb59f7efac48a022d100006299eb23bb6e10399c837777838454570b37f9a8b0ddd3a71b573ddeb1c9cb7574dc"}, {0xdd, 0xa5, "653b746a20780c42ac8715fbd74c7e5ac6a7d7d9227927fa2ad41796d0e4a8d8f247870564d8debaa0822471f3aaf3b30fa41eb9f3fa0b0cb8868760fd54204acfb4a29092569fbe08fac0670f33bcd7be530a578b30c044495f97cb1985d0cffc7444e5c16e6779728cf2b9883964c1f4dedd4e4971faaddb73ae599af3909b182337c1ff94b1ebd388934d9b89a575defb52086172e905d1dec43c81f43b87a1a8bf11bb"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x100, 0x3]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x444, 0x33, @reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @broadcast, @device_b, @initial, {0x5, 0x2}}, 0x4000, 0x7ff, @device_b, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x6c, 0x1}, {0x36}, {0x13, 0x1}]}, @void, [{0xdd, 0x97, "8097c502cfb0f38f16fe7f31f28c25c9c9a7433a3b078bf8ddae37c71ddb1392aa27fb53d600b2f6689787db3ff9621980122d4286580f1f2d6a3788858deb7a095fa65e783bc3105008b14351a6f7f49848ddbeff54c5966b9e607fa8428417657af83d80fae58032a30250c1d04ea23aa6ccb1781e72027ee5b580f5a47b7bf6f9b81c2e97e73ab914eb2a284be5e3f256c0e26c5c79"}, {0xdd, 0x1a, "a1eafe726f847a99d9c144a131cc9627f48c634d093a8fe5e5cf"}, {0xdd, 0xd5, "53f79e2a60c70e8ff74c4cc9c50426acdd3bc2141fc056404d6f60c0e3b3cbcd4aab6335192ea58a0bb1412ac99d5402e78a7b38419e10ee34ef276927508c379ec2025dc66f618b6c7c2d76686d41079422c1748c736a763e656bbb8070dfe98f128d7602b646e33101c350f4180fafa6501b8de890e850876ed408b4b812741c17e0a4ca87c60e5ef0cc9187092e30e942a69131b25aa5814aee077e50bfc3c97429e76ce3d4ca69e8433b91cda3727e8a65a96c382fcae414b99b430d349d76138843c159bc90b6b16e62a46fcc28ca8daea6fa"}, {0xdd, 0x8b, "46957bc98719a2dcccfb287c649cb43e9e6c2bbb82d74a39c76dbf3c4ec67121c81f6e2974da68d9f3cb2bd9e05febe157d5198a5aae31ef12b469872f32a5d2cc7940885066ade5bd99b59b3486d50bd290c118b99b583c75a1a75b082b72385e935c7dc8cb7da84703dc69aadb698c5114466158fad83ff1a36ffe83ce65753f87c46be3c74fbc517fbe"}, {0xdd, 0xa7, "6609b1886fe3f3d96887a0acd1447e1dfa78ba08bd62565ff2ddded2f6d91757030350fcdb92156f9f0b46fee0b08fab2fa011aac76e7898ada3a9bdab47fba78e25251910f0d62f444fd9c7f35bdaf8089d94102b7d7798589c502dc12cc6474bc1740c0f0c7143bf2b060d9b6382babcd510c9dfb1e9fc7fec5635c4372b87b5cf44a63bda42c2ddb22dd5ad6bce0a94a9d6e74aeabad69ce0a465cd3ee5914a88864317abaa"}, {0xdd, 0x24, "0b97ce7b9ab0ae8e1cfda2ca037921336df86aea7dd3ad21c9c5315db6e84ee79fd284df"}, {0xdd, 0x3f, "b8fe2951a38415147b8ab84291597a9af7b3f76c1ec26afd4a3f6ff869ccf8e5a31c36f91696f5042c3790cdcfc5925d5dc28c508a6f0a732df71494deca09"}, {0xdd, 0x1e, "11485297bea6b23203e2eb7323a8062afc3286ffaa61da685a0a38772746"}, {0xdd, 0xc5, "6503e2a1a73dcd495ca61ff1379c1d3e202fdbbaa041c56b3237bb661dcc8a91d49161b619d462673df51120dc3a9f57611f958648ffed6cbaaabdaf98d2304814c4c584b7db42e6b166eb49c91ac5dd5a67ba172c682efcc6f6ea862c361932adba2b0285a62756bd194fa2d5fd911922dbb75e491b6b090f3977145c2e9d3fde5ab9de0d36fc94da8fd5564065408a60463acfa1ebc11c9e65b4d20ff3b6448fb97759c41be3c74ee97c78be0a252ae4d37bce4edce949f59158cb9b63162121e1f92a43"}]}}]}, 0x95c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008050)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xd5)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xa0, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x20000800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c004}, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x16}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "853a0343b3c7ac10c2b7ee92dfc06fdc"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='cgroup.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5652340aec06db7d3e806a597c66df54"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0xc080)
r6 = socket(0x15, 0x800, 0x61)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xac, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbd}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8, 0x6, 0x1000, 0x9, 0x0]}, @NL80211_ATTR_FRAME={0x32, 0x33, @action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @device_a, @random="a92a65983719", {0x7, 0xcf}}, @ver_80211n={0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x6, {0x0, 0x4, @void, @val=0x3d, @void}}}}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4080)

[  118.772067] audit: type=1400 audit(1732549233.787:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:40:33 executing program 7:
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600210}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6885a11b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x208, r0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc2, 0x13}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1458}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0x1b, 0x1}, {0x9, 0x1}, {0x6c}, {0x4, 0x1}, {0x5}, {0xb, 0x1}, {0x2b, 0x1}, {0x6c}, {0xb, 0x1}, {0x1b, 0x1}, {0x30}, {0xc, 0x1}, {0x16}, {0x60, 0x1}, {0x3, 0x1}, {0x60}, {0x48}, {0x6, 0x1}, {0x1}, {0x5}, {0x2}, {0x2}, {0x48, 0x1}, {0x2}, {0x4}, {0x36, 0x1}, {0xb}, {0x3, 0x1}, {0x48}, {0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffeff}, @NL80211_ATTR_KEYS={0x198, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x10, 0x4, "fbb66747f95c81923acf4a19"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x11, 0x4, "273e7af81a430b9dcab95868c1"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ff4be76efc134ac1d2a45e604"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "11f0ca6320"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x1d3a4fa0bc15a898}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "78290db3b0e182b286c5cebcb7"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6d47fc8687bf539a3cddc54957"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c4af866744f2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x14)
r1 = syz_open_dev$vcsa(&(0x7f0000000640), 0x8eaf, 0x1)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, r0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6c}}}}, [@NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x7, 0x4, "6e897e"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x9, 0x4, "18431129b7"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "85b8f5fc808d74388d9897a910"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000840)={0x3, 0x80, 0x38, 0x0, 0x5, 0x7c, 0x0, 0x0, 0x100000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x348, 0x2, @perf_bp={&(0x7f0000000800), 0x4}, 0x41c40, 0x3cf, 0x2db9, 0x0, 0x6, 0x4, 0xe74, 0x0, 0xd6, 0x0, 0x4})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48000)
r2 = syz_io_uring_complete(0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000009c0)={0x3, 0x80, 0x61, 0x20, 0x7, 0x4c, 0x0, 0x7fffffff, 0x200, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x2d33, 0x300}, 0x10080, 0x1, 0x1, 0x4, 0x5, 0x10000, 0x69ea, 0x0, 0x20, 0x0, 0x8})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x47}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xe2}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xfc}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x10)
socketpair(0x15, 0x4, 0x0, &(0x7f0000000b40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5}}}}, [""]}, 0x20}}, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x11)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3e8, 0x5c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040851}, 0x24040010)
sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0xa2080200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x90, r0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2d851d004f3c38bd45452be21a0315e3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "73a57635a8abead6fe00ab7cab68ee36"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ee05ef2a8d4870105d63fbfc90e82863"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a53614e7f25c4c1684ef47768d11a15f"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "66b0c3fbb2a36926d0c42975a1d05752"}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00'})

15:40:33 executing program 5:
clock_gettime(0x3, &(0x7f0000000000))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x4, 0x400}, 0x2)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x6f}}}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x137}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x40}, 0x1, 0x0, 0x0, 0x2004e040}, 0xc004)
r1 = socket(0xf, 0x800, 0x2)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x678a3844b80b926e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x50}}, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r3 = syz_io_uring_complete(0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x1010, r3, 0x8000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x39}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x100}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8f36324484bd"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x14004011}, 0x0)
r6 = syz_io_uring_complete(r4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x6f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x80c)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x8000000)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x40010, r3, 0x10000000)
syz_io_uring_submit(r8, r9, &(0x7f0000000980)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x1}, 0x8)
sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x104, r0, 0xda392af61cd00a02, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2cd, 0x51}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0xff, 0x7fff, 0x8, 0x5}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x6, 0x80, 0x8fee, 0x20}}]}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1ff, 0x1, 0x8, 0x5, 0x1, 0x20, 0x7, 0x4, 0x7ff, 0x4, 0x5, 0x3, 0x1, 0x0, 0x7ff, 0x8000]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c148bf5090ee8284320d9c6d3c7334eaaba758a9f7226b06849d9ff42e11ce918884606f87580360542e6801ff56589acebdf557230b0754b91a548834ada9a118e5018d482ab0ba33e34d26b9f2fbe9280a7f2b3c1fe22f33061072409777cea6cebaad31c7b72f1b9c660e2c419734f087644826bd31c30c33fd6e8746c4c3"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}]]}, 0x104}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000)

15:40:33 executing program 6:
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000040)={0x6b4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x3bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x0, 0x9, 0x4, 0x4, 0x1, 0x9, 0x2, 0x36]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x12, 0x12, 0x1b, 0xb, 0x24, 0x9, 0x30, 0x4, 0x6, 0x2, 0x3, 0x3cc9fa5b20a78bd2, 0x30, 0x18, 0x12, 0x5, 0x1b, 0x24, 0x6, 0x1b, 0x1b, 0x2, 0x53, 0x9, 0x9, 0x12, 0x18, 0x0]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x5, 0x36, 0xc, 0x24, 0x34, 0x5, 0x30, 0x16, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0xff, 0x3ff, 0x2, 0xff, 0x3, 0x81]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x6}, {0x5}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0xa}, {}, {0x0, 0x8}, {0x2, 0x7}, {0x6, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x5, 0x7}, {0x5, 0x7}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x5, 0x3, 0x7, 0x3, 0x800, 0x7ff]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x1}, {0x1, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0xa}, {0x1}, {0x3, 0x9}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x5, 0x6}, {0x4, 0x5}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0x5}, {0x1, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x8}, {0x2, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x4}, {0x4}, {0x7, 0x1}, {0x3, 0x3}, {0x5, 0x3}]}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6c20, 0xff, 0x8, 0x7ff, 0x5, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x7}, {0x3, 0x8}, {0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x1}, {0x6}, {0x2}, {0x5, 0x5}, {0x7}, {0x3, 0xa}, {0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x1}, {0x7, 0x9}, {0x4, 0x4}, {0x7, 0x4}, {0x5, 0x1}, {0x1, 0x9}, {0x2, 0x4}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x2}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x16, 0x12, 0x12, 0x2, 0x78, 0x5, 0x12]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x4}, {0x6}, {0x1, 0x6}, {0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x4, 0x2}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x3}, {0x6, 0x3}, {0x4, 0x8}, {0x5, 0x8}, {0x2}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x7, 0x4}, {0x4, 0x9}, {}, {0x5, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x6, 0x9}, {0x4}, {0x5, 0x5}, {}, {0x4, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x5, 0x1}, {0x5, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x2}, {0x4}, {0x6}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x9}, {0x7, 0x9}, {0x0, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x9, 0x0, 0x0, 0x7fff, 0x0, 0x80, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x9, 0x7, 0x4, 0x3, 0x7]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x4}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x4}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x4, 0x40, 0xfff, 0x4, 0xc9d1, 0x8]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x12, 0x1, 0x1, 0x48, 0xb, 0xb, 0x48, 0x1, 0x24, 0x24, 0x30, 0x9, 0x4, 0x1b, 0x30, 0x18, 0x24, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0xa}, {0x3, 0x2}, {0x3, 0x8}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0xa}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x9}, {0x1}, {0x4}, {0x1, 0x3}, {0x2, 0x6}, {0x6, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x7, 0x13}, {0x5, 0x9}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0xa}, {0x4, 0x7}, {0x6, 0xa}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x3}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x4}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x2}, {0x2, 0x3}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x4}, {0x7}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x6}, {0x0, 0x3}, {0x3, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x3}, {0x2}, {0x4, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0xa}, {0x7, 0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x4, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x1}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x2}, {0x1}, {0x4, 0x8}, {0x3, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x4}, {0x0, 0x5}, {0x4, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x6}, {0x3, 0x9}, {0x0, 0x8}, {0x7}, {0x4, 0x8}, {0x6, 0x7}, {0x3, 0xa}, {0x2}, {0x5, 0x3}, {0x2}, {0x0, 0x8}, {0x3}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0xa}, {0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {}, {}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe8, 0x1, 0x5, 0xff, 0xca, 0x3f, 0x5, 0x101]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1, 0x60, 0x3a, 0x30, 0x12, 0x1, 0x30, 0x16, 0x30, 0x36, 0xb, 0x60, 0x5, 0x2, 0x24, 0x3, 0x3, 0x1, 0x1b, 0x24, 0x30, 0x5, 0x4, 0x16, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x8000, 0x101, 0x57, 0x8, 0x7, 0xfffe]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0xa}, {0x0, 0xa}, {0x1, 0x1}, {0x3, 0x9}, {0x1, 0x9}, {0x7, 0x5}, {0x4}, {0x5, 0x2}, {0x3, 0x2}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1, 0x3, 0x7, 0x1f, 0x2, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd, 0x2, 0xe3c5, 0xef, 0x5, 0x3, 0x7ff, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x18, 0x9, 0xb, 0x9, 0x18, 0x60, 0x9, 0xc, 0x3d, 0x6c, 0x6, 0x9, 0x6, 0x24, 0xc, 0x60, 0x6, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x7, 0x2}, {0x7}, {0x5, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0x1}, {0x5, 0x8}, {0x5, 0x4}, {0x5, 0x6}, {0x3}, {0x3, 0xa}, {0x4, 0x6}, {0x1}, {0x5, 0x7}, {0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x5}, {0x3}, {0x7, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0x2}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x2, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x3}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x7, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x6, 0x8}, {0x1}, {0x6, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0x4, 0x9, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x100, 0x3ff, 0x9, 0x2, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x30, 0x60, 0x2, 0xb, 0x48, 0x5, 0x60, 0x6c, 0x1, 0x1, 0xa, 0x2, 0x4, 0x60, 0x1, 0xb, 0x36, 0x4, 0x3, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7fff, 0x4, 0x8, 0x40, 0x5, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x2, 0x200, 0x3ff, 0x6, 0x8001, 0x7, 0x20]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x9, 0x16, 0x9, 0x6, 0x9, 0x48, 0x9, 0x9]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x6}, {0x4, 0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x9}, {0x4, 0x7}, {0x6}, {0x4, 0x2}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x3, 0xc, 0x12, 0x24, 0x1, 0x1, 0x5, 0x30, 0x6, 0x18, 0x60, 0x60, 0x6c, 0x9, 0x5, 0x36, 0x5, 0xb, 0x12, 0x12, 0x4, 0x6, 0x18, 0x9, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x8000, 0x7, 0x1d1, 0x0, 0x4, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x7f, 0x1, 0x63f, 0xffff, 0x7ff, 0x87e1]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x1}, {0x6, 0xa}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {}, {0x5, 0x8}, {0x0, 0x5}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x3}, {0x4}, {0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x4}, {0x7, 0x1}, {0x7, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd5, 0x795, 0x4, 0x7, 0x8, 0x0, 0x4, 0x5c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x61, 0x24, 0x16, 0xc, 0x36, 0x36, 0x4, 0x31, 0x9, 0x5, 0xb, 0x9, 0xb, 0x12, 0x1b, 0x1e, 0xc, 0x16, 0x16, 0x2d, 0x36, 0x18, 0x6]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0xb, 0x1, 0x6c, 0x48, 0x1b, 0x3, 0x1b, 0x6c, 0x0, 0xc, 0xb, 0x1b, 0x1, 0x6, 0xb, 0x30, 0x2, 0x5]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x4}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0x5}, {0x5, 0xa}, {0x3, 0x3}, {}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x3}, {0x3, 0x6}, {0x3, 0x4}, {0x3, 0x6}, {0x2, 0x7}, {0x7, 0xa}, {0x7, 0x4}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0x5}, {0x1, 0x6}]}]}, @NL80211_BAND_2GHZ={0x11c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x9}, {0x6, 0x7}, {0x3, 0x8}, {0x1}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x2}, {0x7, 0xa}, {0x6, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0x4}, {0x2, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x3, 0x6}, {0x5, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7f, 0x7, 0x7, 0x0, 0x5064, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x5, 0x12, 0x12, 0xc, 0x12, 0x6c, 0x12, 0x12, 0x4, 0x1, 0x6, 0xb, 0x18, 0x5, 0x1, 0x1b, 0x3, 0x1, 0x12, 0xc, 0x6c, 0x16, 0x18, 0x16, 0x1b, 0x5, 0x30, 0x7b, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x4}, {0x7, 0x9}, {0x2, 0x7}, {0x5, 0x2}, {0x0, 0x5}, {0x1}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x2, 0xa}, {0x0, 0x2}, {0x4}, {0x4, 0x5}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x3}, {0x2}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x8}, {0x1}, {0x7, 0xa}, {0x1, 0x8}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x7, 0x1}, {0x4, 0x8}, {0x4, 0xa}, {0x2, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x3}, {0x3}, {0x2, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x8, 0x4, 0xbe, 0x401, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0xc5c9, 0x5, 0x1, 0x3, 0x4, 0x1c55]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0xb, 0x12, 0x6, 0x18, 0x16, 0x0, 0x36, 0x60, 0x48, 0x24, 0x30, 0x2, 0x6, 0x36, 0x16, 0x78, 0xb, 0x3, 0x5, 0xc, 0x4, 0x1b, 0x12, 0x5, 0x6c, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1ff, 0x3df, 0x64f, 0x4, 0x3, 0x400, 0x9]}}]}]}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x1}, 0x24044011)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x11c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xfc, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xec, 0x2, "5c4d6aaa9c36822c616c66a98492e8c6df532c4a0d1487aefb0bb305f8efe58a9ed1f4b42bd75ec65143909fa7a8d9b665920f5577163227085664bf2c7436916b3c221162818abae563ae0f9c6686200f1086dd047de24942fde3852c2c27ffd4eacd01b97c5e2a1afcdb738596db3b289927a138e25092501fa1d7fb5ee0b450012d7675a391213e02c2c1d65c0046e950a66dfb9cd264b6af4f2f11384edfeb3d94803c8aa181296b6e45875cbac838c245eafdd30d2df58a7885e63453a0ddae0d911340fd7f03219d5800499a1db852481b4aa55f3d0977f9c37ef538268be5290585fac145"}}, {0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x41)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x20a00, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x2c}}, 0x40)
socketpair(0x1e, 0x1, 0x200, &(0x7f0000000c00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, r4, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x61}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x48040)
connect$bt_l2cap(r2, &(0x7f0000000e00)={0x1f, 0x3ff, @none, 0x4, 0x1}, 0xe)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x20}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x404008c}, 0x4000800)
r6 = accept4$bt_l2cap(r1, &(0x7f0000000f40)={0x1f, 0x0, @none}, &(0x7f0000000f80)=0xe, 0x81800)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040840}, 0x4040)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x10, 0x3f8, 0x8, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}}, 0x80)
socketpair(0x5, 0x6, 0x2, &(0x7f0000001240)={<r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r3)
sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xf0, r10, 0x20, 0x20, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0xc4, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xcd5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x716}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x914}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd14}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x52}]}, 0xf0}}, 0x40)

[  120.134660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.137744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.140039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.144651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.152613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  120.156567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.205745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.211486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.214103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.214949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.216674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.217593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.227513] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.230976] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  120.232405] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.233228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.235258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  120.236791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.289440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.293563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.295771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.300750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.305539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  120.309618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.319454] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.321590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.326951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.328778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.331558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.332960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.334069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.338759] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.344956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  120.347800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.349987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.352012] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.355449] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.357641] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  120.358696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.373880] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.377024] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.378592] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  120.379624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  120.380730] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  120.382120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.389478] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.394451] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  120.397471] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  122.227287] Bluetooth: hci0: command tx timeout
[  122.290347] Bluetooth: hci2: command tx timeout
[  122.291079] Bluetooth: hci1: command tx timeout
[  122.418509] Bluetooth: hci6: command tx timeout
[  122.420421] Bluetooth: hci7: command tx timeout
[  122.421936] Bluetooth: hci3: command tx timeout
[  122.482334] Bluetooth: hci5: command tx timeout
[  122.484119] Bluetooth: hci4: command tx timeout
[  124.274614] Bluetooth: hci0: command tx timeout
[  124.338379] Bluetooth: hci1: command tx timeout
[  124.338907] Bluetooth: hci2: command tx timeout
[  124.466520] Bluetooth: hci3: command tx timeout
[  124.467055] Bluetooth: hci6: command tx timeout
[  124.467713] Bluetooth: hci7: command tx timeout
[  124.530297] Bluetooth: hci5: command tx timeout
[  124.530793] Bluetooth: hci4: command tx timeout
[  126.322296] Bluetooth: hci0: command tx timeout
[  126.386282] Bluetooth: hci2: command tx timeout
[  126.386779] Bluetooth: hci1: command tx timeout
[  126.514771] Bluetooth: hci7: command tx timeout
[  126.516039] Bluetooth: hci6: command tx timeout
[  126.517368] Bluetooth: hci3: command tx timeout
[  126.578339] Bluetooth: hci5: command tx timeout
[  126.579704] Bluetooth: hci4: command tx timeout
[  128.370482] Bluetooth: hci0: command tx timeout
[  128.434462] Bluetooth: hci1: command tx timeout
[  128.435014] Bluetooth: hci2: command tx timeout
[  128.562548] Bluetooth: hci3: command tx timeout
[  128.567943] Bluetooth: hci6: command tx timeout
[  128.568837] Bluetooth: hci7: command tx timeout
[  128.626315] Bluetooth: hci4: command tx timeout
[  128.626893] Bluetooth: hci5: command tx timeout
[  182.857847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.859818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.863816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.869372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.871295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  182.872535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.905990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.910207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.912662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.924287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.926822] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  182.927884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.979108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.982391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.984131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.993235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.998409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.000031] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  183.000793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.002338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.003331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.014365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.021393] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  183.024394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.047646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.052450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.056999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.057455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.063381] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.063560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.072451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  183.078364] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  183.082403] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  183.083380] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.096757] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.096855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.101511] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  183.106760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.108543] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  183.109554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.114927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.116407] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  183.117403] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  183.126674] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  183.128149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  183.129713] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  183.133908] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  183.140559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  184.884377] Bluetooth: hci0: command tx timeout
[  184.946255] Bluetooth: hci1: command tx timeout
[  185.074403] Bluetooth: hci3: command tx timeout
[  185.075921] Bluetooth: hci2: command tx timeout
[  185.202398] Bluetooth: hci7: command tx timeout
[  185.203344] Bluetooth: hci4: command tx timeout
[  185.203402] Bluetooth: hci5: command tx timeout
[  185.203925] Bluetooth: hci6: command tx timeout
[  186.931217] Bluetooth: hci0: command tx timeout
[  186.994379] Bluetooth: hci1: command tx timeout
[  187.123312] Bluetooth: hci2: command tx timeout
[  187.123854] Bluetooth: hci3: command tx timeout
[  187.250316] Bluetooth: hci7: command tx timeout
[  187.250859] Bluetooth: hci6: command tx timeout
[  187.251887] Bluetooth: hci5: command tx timeout
[  187.252393] Bluetooth: hci4: command tx timeout
[  188.978268] Bluetooth: hci0: command tx timeout
[  189.042263] Bluetooth: hci1: command tx timeout
[  189.170273] Bluetooth: hci3: command tx timeout
[  189.170822] Bluetooth: hci2: command tx timeout
[  189.298384] Bluetooth: hci5: command tx timeout
[  189.298945] Bluetooth: hci6: command tx timeout
[  189.299030] Bluetooth: hci4: command tx timeout
[  189.299563] Bluetooth: hci7: command tx timeout
[  191.026347] Bluetooth: hci0: command tx timeout
[  191.090377] Bluetooth: hci1: command tx timeout
[  191.218301] Bluetooth: hci3: command tx timeout
[  191.218848] Bluetooth: hci2: command tx timeout
[  191.346336] Bluetooth: hci7: command tx timeout
[  191.346874] Bluetooth: hci5: command tx timeout
[  191.347391] Bluetooth: hci4: command tx timeout
[  191.347835] Bluetooth: hci6: command tx timeout
[  245.122883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.124579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.125713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.132702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.135374] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  245.136719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.182978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.200598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.207494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.211498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.223281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  245.224492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.338727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.343069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.345337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.357686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.360749] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  245.365043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.373717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  245.382413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  245.389404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  245.398427] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  245.403897] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  245.406027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  245.459263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.462021] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  245.470997] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.473448] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  245.473555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.477444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.478972] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  245.484414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  245.488412] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  245.493447] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.500895] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  245.501996] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  245.518444] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  245.520549] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  245.521615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.523350] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  245.526332] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  245.528693] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  245.530003] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  245.535463] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.596848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.617469] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.639030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  245.652466] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  247.219766] Bluetooth: hci0: command tx timeout
[  247.282647] Bluetooth: hci1: command tx timeout
[  247.412220] Bluetooth: hci2: command tx timeout
[  247.475286] Bluetooth: hci3: command tx timeout
[  247.538434] Bluetooth: hci4: command tx timeout
[  247.604402] Bluetooth: hci5: command tx timeout
[  247.606428] Bluetooth: hci7: command tx timeout
[  247.730273] Bluetooth: hci6: command tx timeout
[  249.266281] Bluetooth: hci0: command tx timeout
[  249.330248] Bluetooth: hci1: command tx timeout
[  249.458233] Bluetooth: hci2: command tx timeout
[  249.523184] Bluetooth: hci3: command tx timeout
[  249.586338] Bluetooth: hci4: command tx timeout
[  249.650281] Bluetooth: hci5: command tx timeout
[  249.650787] Bluetooth: hci7: command tx timeout
[  249.778400] Bluetooth: hci6: command tx timeout
[  251.314733] Bluetooth: hci0: command tx timeout
[  251.378405] Bluetooth: hci1: command tx timeout
[  251.506243] Bluetooth: hci2: command tx timeout
[  251.570393] Bluetooth: hci3: command tx timeout
[  251.635178] Bluetooth: hci4: command tx timeout
[  251.698312] Bluetooth: hci7: command tx timeout
[  251.698826] Bluetooth: hci5: command tx timeout
[  251.826439] Bluetooth: hci6: command tx timeout
[  253.362339] Bluetooth: hci0: command tx timeout
[  253.427258] Bluetooth: hci1: command tx timeout
[  253.554248] Bluetooth: hci2: command tx timeout
[  253.618452] Bluetooth: hci3: command tx timeout
[  253.682232] Bluetooth: hci4: command tx timeout
[  253.746560] Bluetooth: hci5: command tx timeout
[  253.747065] Bluetooth: hci7: command tx timeout
[  253.874229] Bluetooth: hci6: command tx timeout
[  307.658990] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.660844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.663474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.664891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.665914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.667103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.671307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.673418] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  307.675047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.676015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.690543] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  307.691772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.773827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.777749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.779079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.781928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.783698] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  307.784987] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.866012] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.867644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.868897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.873555] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.877931] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  307.880520] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.911559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.926598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.928359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.931464] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.933832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.937340] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  307.938388] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.966508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.969365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.973379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.974870] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  307.975874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.987037] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.989469] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.990987] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.998885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.008245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  308.013432] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.083958] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.086425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.087879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  308.091086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  308.094431] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  308.095458] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  309.746315] Bluetooth: hci0: command tx timeout
[  309.747436] Bluetooth: hci1: command tx timeout
[  309.810645] Bluetooth: hci2: command tx timeout
[  309.938264] Bluetooth: hci3: command tx timeout
[  310.002360] Bluetooth: hci5: command tx timeout
[  310.067214] Bluetooth: hci4: command tx timeout
[  310.322372] Bluetooth: hci7: command tx timeout
[  310.578260] Bluetooth: hci6: command tx timeout
[  311.794327] Bluetooth: hci1: command tx timeout
[  311.794861] Bluetooth: hci0: command tx timeout
[  311.860183] Bluetooth: hci2: command tx timeout
[  311.987197] Bluetooth: hci3: command tx timeout
[  312.050380] Bluetooth: hci5: command tx timeout
[  312.115394] Bluetooth: hci4: command tx timeout
[  312.371221] Bluetooth: hci7: command tx timeout
[  312.628060] Bluetooth: hci6: command tx timeout
[  313.843222] Bluetooth: hci0: command tx timeout
[  313.843753] Bluetooth: hci1: command tx timeout
[  313.907248] Bluetooth: hci2: command tx timeout
[  314.035354] Bluetooth: hci3: command tx timeout
[  314.101178] Bluetooth: hci5: command tx timeout
[  314.163261] Bluetooth: hci4: command tx timeout
[  314.418269] Bluetooth: hci7: command tx timeout
[  314.675211] Bluetooth: hci6: command tx timeout
[  315.891483] Bluetooth: hci1: command tx timeout
[  315.891985] Bluetooth: hci0: command tx timeout
[  315.954190] Bluetooth: hci2: command tx timeout
[  316.083230] Bluetooth: hci3: command tx timeout
[  316.147213] Bluetooth: hci5: command tx timeout
[  316.211166] Bluetooth: hci4: command tx timeout
[  316.467235] Bluetooth: hci7: command tx timeout
[  316.723210] Bluetooth: hci6: command tx timeout
[  370.065644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.078480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.081525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.087065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.088891] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  370.092282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.176696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.178649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  370.181636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.182802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.186661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  370.189358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  370.195036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  370.196072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.199538] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  370.201593] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  370.202463] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.204497] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  370.262999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  370.307882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  370.311299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.316660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.321477] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.334343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  370.339846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.353553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.356967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.372611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  370.375030] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.383325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.390449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.392045] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  370.393580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.404765] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  370.406300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.407035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.418380] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.429551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  370.465249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.511641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.514426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.515994] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.524287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  370.525098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  370.526933] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  370.530317] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  370.531390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.532216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  372.147463] Bluetooth: hci0: command tx timeout
[  372.275278] Bluetooth: hci1: command tx timeout
[  372.275331] Bluetooth: hci2: command tx timeout
[  372.404361] Bluetooth: hci3: command tx timeout
[  372.596353] Bluetooth: hci7: command tx timeout
[  372.597089] Bluetooth: hci4: command tx timeout
[  372.658328] Bluetooth: hci6: command tx timeout
[  372.658354] Bluetooth: hci5: command tx timeout
[  374.195262] Bluetooth: hci0: command tx timeout
[  374.323208] Bluetooth: hci1: command tx timeout
[  374.323237] Bluetooth: hci2: command tx timeout
[  374.450182] Bluetooth: hci3: command tx timeout
[  374.642802] Bluetooth: hci4: command tx timeout
[  374.642950] Bluetooth: hci7: command tx timeout
[  374.706232] Bluetooth: hci6: command tx timeout
[  374.707194] Bluetooth: hci5: command tx timeout
[  376.242291] Bluetooth: hci0: command tx timeout
[  376.370623] Bluetooth: hci1: command tx timeout
[  376.371181] Bluetooth: hci2: command tx timeout
[  376.498214] Bluetooth: hci3: command tx timeout
[  376.711164] Bluetooth: hci7: command tx timeout
[  376.711665] Bluetooth: hci4: command tx timeout
[  376.754297] Bluetooth: hci5: command tx timeout
[  376.754949] Bluetooth: hci6: command tx timeout
[  378.290275] Bluetooth: hci0: command tx timeout
[  378.418692] Bluetooth: hci2: command tx timeout
[  378.418747] Bluetooth: hci1: command tx timeout
[  378.547395] Bluetooth: hci3: command tx timeout
[  378.740177] Bluetooth: hci4: command tx timeout
[  378.741184] Bluetooth: hci7: command tx timeout
[  378.802232] Bluetooth: hci6: command tx timeout
[  378.803540] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
15:45:38  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=1ffff11006c4cf97 RCX=0000000000000000 RDX=1ffff11001a26b96
RSI=ffffffff85c16080 RDI=ffff88800d135cb0 RBP=ffffffffffffffff RSP=ffff888036267ca8
R8 =0000000000000001 R9 =ffff88800d135cb8 R10=ffffffff863f9417 R11=00000000000c398f
R12=0000000000000000 R13=ffffffff8115eb28 R14=0000000000000001 R15=ffff88800d135280
RIP=ffffffff81303cc7 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb86c76f540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557fabd8e4c8 CR3=0000000031aca000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806cf40330 RCX=0000000000000001 RDX=0000000000000000
RSI=ffff88806cf40350 RDI=ffff88800ebe4168 RBP=ffff888024c1f7e0 RSP=ffff888024c1f710
R8 =0000000000000001 R9 =fffffbfff0fdddec R10=ffffffff87eeef67 R11=ffff88806cf40350
R12=0000000000000286 R13=0000000000000001 R14=ffff888008c4f780 R15=ffff88800db4f818
RIP=ffffffff81848375 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe2600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1301e9b438 CR3=0000000034cba000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000