syzkaller login: [ 75.545321] sshd (233) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:32452' (ECDSA) to the list of known hosts. 2025/01/21 09:49:09 fuzzer started 2025/01/21 09:49:10 dialing manager at localhost:44833 [ 80.305202] cgroup: Unknown subsys name 'net' [ 80.445271] cgroup: Unknown subsys name 'cpuset' [ 80.471339] cgroup: Unknown subsys name 'rlimit' [ 86.661257] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 09:49:27 syscalls: 2217 2025/01/21 09:49:27 code coverage: enabled 2025/01/21 09:49:27 comparison tracing: enabled 2025/01/21 09:49:27 extra coverage: enabled 2025/01/21 09:49:27 setuid sandbox: enabled 2025/01/21 09:49:27 namespace sandbox: enabled 2025/01/21 09:49:27 Android sandbox: enabled 2025/01/21 09:49:27 fault injection: enabled 2025/01/21 09:49:27 leak checking: enabled 2025/01/21 09:49:27 net packet injection: enabled 2025/01/21 09:49:27 net device setup: enabled 2025/01/21 09:49:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 09:49:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 09:49:27 USB emulation: enabled 2025/01/21 09:49:27 hci packet injection: enabled 2025/01/21 09:49:27 wifi device emulation: enabled 2025/01/21 09:49:27 802.15.4 emulation: enabled 2025/01/21 09:49:28 fetching corpus: 50, signal 13611/14907 (executing program) 2025/01/21 09:49:28 fetching corpus: 100, signal 19505/21487 (executing program) 2025/01/21 09:49:28 fetching corpus: 150, signal 20767/23520 (executing program) 2025/01/21 09:49:29 fetching corpus: 200, signal 22152/25523 (executing program) 2025/01/21 09:49:29 fetching corpus: 250, signal 23161/27133 (executing program) 2025/01/21 09:49:29 fetching corpus: 299, signal 23570/28258 (executing program) 2025/01/21 09:49:29 fetching corpus: 299, signal 23570/29060 (executing program) 2025/01/21 09:49:29 fetching corpus: 299, signal 23570/29860 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/30642 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/31428 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/32209 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/32983 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/33795 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/34596 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/35375 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/36171 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/36918 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/37678 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/38471 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/38756 (executing program) 2025/01/21 09:49:30 fetching corpus: 299, signal 23570/38756 (executing program) 2025/01/21 09:49:34 starting 8 fuzzer processes 09:49:34 executing program 0: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'veth1\x00', {0x101}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x45}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4058880}, 0x645cd6e3247258eb) r1 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x80901) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x4e22, @multicast2}, 0x328, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='gre0\x00', 0x6, 0xfffffffffffffffe, 0x8000}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}, @CTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) unlink(&(0x7f0000000400)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/softnet_stat\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000580)=0xc, 0x4) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x820, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) ioctl$FIONCLEX(r1, 0x5450) r3 = accept$inet(r1, &(0x7f0000000740)={0x2, 0x0, @initdev}, &(0x7f0000000780)=0x10) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x1000400, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@privport}, {@fscache}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'net/softnet_stat\x00'}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, ':/\'@'}}]}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000880)) ioctl(r1, 0x3, &(0x7f00000008c0)) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xad}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4046881) 09:49:34 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1b7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x100}, 0x1, 0x0, 0x0, 0x48891}, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000240)={{0x0, 0x62, 0x6, 0x9, 0xec5, 0x1, 0x8fa4, 0x0, 0x40, 0xce23, 0x5, 0x3, 0x7fffffff, 0x1, 0x5}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000300)={{r3, 0x0, 0x1, 0xfa9e, 0x8240000000000000, 0x4, 0x3, 0xffffffc1, 0x6, 0x80000001, 0x3, 0x7, 0x9, 0x7, 0x7ff}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001300), 0x480000, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x2c, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4a79de33}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000001480)={0x200, 0x20}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000014c0)={0x0, 0x925c, 0x0, 0x5d}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000001500)={0x5, 0x200, 0x4, 0xedb9, 0x2, [{0xff, 0x0, 0x40, '\x00', 0x1}, {0x40, 0x2, 0x5, '\x00', 0x20a}]}) r6 = socket$netlink(0x10, 0x3, 0x5) ioctl$FIONCLEX(r6, 0x5450) r7 = accept4$inet(r4, 0x0, &(0x7f00000015c0), 0x0) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001600)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, 0x4e21, 0x400, 0x4e24, 0x7ff, 0x0, 0x80, 0x40, 0x32, 0x0, 0xee01}, {0x2, 0x7, 0x8, 0xffffffffffff2d41, 0xc000, 0xa4, 0x5, 0x17}, {0x7, 0x4, 0x6, 0x7}, 0x4, 0x6e6bb6, 0x2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d2, 0x2b}, 0x2, @in6=@empty, 0x3506, 0x2, 0x1, 0xfa, 0x7fff, 0xfff, 0x7}}, 0xe8) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000001ac0)={{'\x00', 0x1}, {0xfffffffffffeffff}, 0x12, 0x0, 0x0, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)="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", 0x12e, 0x0, &(0x7f00000018c0)={0x2, 0xf3, {0x1, 0xc, 0xda, "5e5b708e658e015e47754b9071da9851d4d5042f28132de3f75e8ea997ff7a9510413afd2bd3016cbef97271fe534084da25f2e17e8ffcb9a35077cc33a62813151bae604fb23d853eb62ff33d98b4ae0d8cb8696326a4b5bd4dd8353bee5043ab75ff9cdd18066d28b38b0ac814e362d1c8ff17927ae24e793d8afb6f97c7aa3549c8f4bf5fa4f7844bb2d3e1b5940fc9c2ee3cb4b3faad295f904a6a6ac883c2ba683048cffed9b92c38c3a9f41b8c675bb5e613ab480ce566fd4e386c79d03b1538e018503ac0809d0dbdcedb1780d8dd7e3a1198c5faafb7", 0xc, "47d2c4025bf512617ee2e4cf"}, 0xdb, "170b05b3dbdc1cd76216177c9bf5ec6f2e71c1ccf432f38295c0168e5cae8dad11bf5cd39678ade1211b5205a454615e6bf319671c63e8c4f44f22c8e64729d0bc709f43d4b4743e89843116394e3a94448dc56f082d1108d083a831e709f550316518e2d5425edb6d002bc0d9bbc808e3285dff1a42f80783e04ee98f5dc4f9ffe58515d451c43ff66c3c6ffaa8b4218d0c5cb41a673a0ea740becc8c9b33e756a83773260dd06ccb229e27113dcdd45f636f8c3c17b44f77f81c55ee5ce5276461c48ae633eceb1dcf160f107ba17a052bc1fb2413efdb29315c"}, 0x1da}) ioctl$FIOCLEX(r6, 0x5451) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x58}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x28}}, 0x40001) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000001c40)=""/121) 09:49:34 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14c, 0x13, 0x8, 0x201, 0x70bd26, 0x25dfdbfe, {0x4, 0x0, 0x4}, [@generic="485a63c5cfc2d6ec0bb57723b56444bfd518dbe622910bd847a0f8c1b3aa0c19c77edab49055ed6fd3b4bcae4df73d76133202c1c7ce2e2f49785f1b95e7e70f73d8a12d5b0176ff2e4d178b439f6dabc7a67fdb36c7853d6d007efa76dda87432e4f5ab9067ac02a9cb99cb25f3b415240a6f3c5bc948cab32aad6f5f66a679d2fecc40368d5cf34df9816b8535552429aca426e8301c60a1c59eaefc5f81bd13933a2429386737294850686480af6ec46bd4bc8c43b5a72e45713a4a6103fe709f52060182db25ec0ab6e7bea7c3958dfefb99daafd4463e", @nested={0x5b, 0x94, 0x0, 0x1, [@generic="8c6d9a4775b9e67065da73ecfaeb7f641a5f4de64a08503d1b859e64bd838e4d2179a50a5e51eafd0fb068c126976367b2a75cc47014f1e987446c067847ed7668214d6f65755f13838186591f60d71d4d3a4a80d27870"]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x4000854) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x6, 0x401, 0x2, 0x800}) fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=@random={'security.', '::%:+\x00'}, &(0x7f00000002c0)=""/230, 0xe6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe4a, 0x35}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1f0}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaa8}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x40040) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000500)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x8000, 0x0) bind$bt_hci(r0, &(0x7f0000000580)={0x1f, 0x2, 0x1}, 0x6) signalfd4(r0, &(0x7f00000005c0)={[0xef]}, 0x8, 0x80000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000600)) r1 = syz_open_dev$vcsu(&(0x7f0000000640), 0x8, 0x20800) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = accept$inet6(r0, &(0x7f0000000880)={0xa, 0x0, 0x0, @private1}, &(0x7f00000008c0)=0x1c) dup3(r0, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/class/ata_port', 0x0, 0x5) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f0000000940)={0x8, 0xb}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x27}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000bc0)=0x3) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x90, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7a14ae090e6b199b9dd1145d2a"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "e8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b87e1341cd6a0dc764eaee3e48"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "867d8d69c8e291af7cbb7189aa"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x4000801) 09:49:34 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x105401, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}}, 0x8000) r2 = pidfd_getfd(r0, r0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x124, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0ba1f285596047879f3d3a63b01203b725986bee835673b4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "27a08cc4dc7a3faca9076c54bb06078e9ce915abafde601d"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe554d56148f9e14574834310d922c9b6a7b6aad5c3427eb"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x124}, 0x1, 0x0, 0x0, 0x2400c804}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8001) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) getpeername$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x177cabe33b73f56}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2011000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0x200, 0x6, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffff8, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4084}, 0x40002) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44051}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x17a, 0xf}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x3f, 0x10001, 0x9, 0x1}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20008041) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000c00)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x3f, 0x1, 0x0, 0x100, 0xee20, 0x180110000}) bind(r0, &(0x7f0000000c80)=@rc={0x1f, @any, 0x40}, 0x80) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x144, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x23ca}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7ff, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c801) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f80)={0x1c8, 0x0, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc004}, 0x8004) 09:49:34 executing program 5: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x40a, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000880) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, 0x1, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x30, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x310}]}]}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x3, 0x3, 0x101, 0x0, 0x0, {0xd, 0x0, 0x3}, [@NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3f7, 0x4, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) r0 = creat(&(0x7f00000004c0)='./file0\x00', 0x108) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x124, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xfc, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffff800}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe96d593}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6760}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}]}, 0x124}, 0x1, 0x0, 0x0, 0x140}, 0xc000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x202, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x13}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x400, 0xd9}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000008c0)={0xffffffffffffffff, 0x8000, 0x6, 0x9}) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xb, 0x34, @random="fcdc5f2e42e9bf"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044041}, 0x4080) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000d00)={0x510e173fde34cfbb, 0x0, 0x7, {0x0, 0x8}, {0x4, 0x8}, @ramp={0x4, 0x2, {0x7, 0x1000, 0xb54, 0x1}}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000f80)={0x15, 0xeb, &(0x7f0000000e80)="966367e0a9d48c032db172d260b6957f06421cfd7278520ba911813c801fa9e5715f1fedbb1ac8f71c744fb16875a952218284b508072ebf052ab53c8d1383e7ec7baab7e43c50b0fd62a7da1b2791aec1ccb0a132f8d182acf541af84460b745ec6054453277b2ce36d1d76eb84f928906a48f310e1d41b0f2fa0a4d371fcb6e3915c6bed50c21e67c7256080a9752f2fd4863450a19c46c71d0a64308dd2dfb36a2532a26159045ad67b193b90bb0e3e82ed60e9f2499f1abd6f996e572fb702a63671543595f0375a776094211d5ed62f1926708b324a0bdf228fcdcf9d360cd274cf8dc2570f36d629"}) 09:49:34 executing program 4: setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x8000, 0x4) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000100)) r2 = accept4(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'SEG6\x00'}, {0x20, 'SEG6\x00'}, {0x20, '}[z'}], 0xa, "47259e5c20ceee3f256fa2a592f84d89d51cfebfd48b39487c8ead970784cd08224ade79cc8d1939d830a698fada0b6c40f8a1c1c395ebb3e0cdf7e7689fe8598f8f07a8ab77fe3047ac"}, 0x65) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x7, 0x700, 0x2ec5, 0x4, {{0xb, 0x4, 0x3, 0x28, 0x2c, 0x68, 0x0, 0x88, 0x4, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x1c, 0x3, 0xc, [{@multicast1, 0x400}]}, @generic={0x83, 0xb, "365578ef3eb7cc1689"}, @noop]}}}}}) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x4c, 0xb4c, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7800, 0x0, 0x800}}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, @can={0x1d, 0x0}, @vsock={0x28, 0x0, 0x2711, @local}, @generic={0x28, "7dcf044a0206a63e4b5238577e31"}, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5, 0x1}) getpeername$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0x20, 0x1, 0x27, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x8000, 0x8000, 0x5, 0x9}}) getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0}, &(0x7f0000000940)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000980)={0x714, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x78, 0x1, 0x2, 0x80000001}, {0x4, 0xfb, 0x80, 0x1}, {0x3, 0x1, 0x1, 0xfff}, {0x8c3, 0x3f, 0xc0, 0x80}, {0xe22, 0x8, 0x1f, 0xffff}, {0xfffe, 0xc1, 0xfb, 0x9}]}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47c9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4a198b36}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe0000000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x40, 0xdf, 0x0, 0xff}, {0x6, 0x1, 0x1, 0xfffffffa}, {0x3, 0x9e, 0x0, 0x7fff}, {0x81, 0x4, 0x5, 0xfffffff7}]}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0xd4, 0x6, 0x5}, {0x8, 0x1f, 0x0, 0x6}, {0xff, 0x20, 0x80, 0x40}, {0x1000, 0x8, 0x0, 0x2}, {0x7fff, 0x1, 0x20, 0x6}, {0x5, 0xc1, 0x7, 0x2}, {0x7, 0x2, 0x2, 0x2b2dc8e4}, {0x8, 0xf4, 0x8, 0x3}, {0x515b, 0xff, 0x6, 0x7}]}}}]}}]}, 0x714}, 0x1, 0x0, 0x0, 0x20004044}, 0x81) syz_io_uring_setup(0x3ddf, &(0x7f0000001140)={0x0, 0xcb39, 0x1, 0x1, 0x47, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000011c0)=0x0, &(0x7f0000001200)) syz_io_uring_submit(r14, 0x0, &(0x7f0000001280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000001240), 0x1, 0x1}, 0x0) [ 104.013843] audit: type=1400 audit(1737452974.342:7): avc: denied { execmem } for pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:49:34 executing program 7: ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x52b06c2d) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r0}, 0x6, 0x0, 0x400}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v2={0x2000000, [{0x8001, 0x1ff}, {0x2, 0x4}]}, 0x14, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) read$rfkill(r2, &(0x7f00000002c0), 0x8) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000300)="6b5216d0e6e4bce5de9a8ff8a4256e8e06364a6a96b9a8d2d08f4ea9cfe7dbd1b9", 0x21) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000380)={@rand_addr, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0x400, 0x80001) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000540)={0x0, @rand_addr, @local}, &(0x7f0000000580)=0xc) inotify_add_watch(r1, &(0x7f00000005c0)='./file0\x00', 0xc0000040) r5 = dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000600)={0x5, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}}, 0x108) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000740)) 09:49:34 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x258]}, 0x8, 0x80000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x41) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffe, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, '.\x00'}) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x0, 0x9, 0x801, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x400}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xcd}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x8040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001640)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001600)={&(0x7f00000006c0)={0xf20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x8fc, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x29e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x15}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x514, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x6}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x7}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x6}, {0x6, 0x3}, {0x4, 0x7}, {0x5}, {0x3, 0xa}, {0x3, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x7}, {0x5, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x5, 0x3}, {0x5, 0xa}, {0x2, 0x9}, {0x3, 0x7}, {0x0, 0xa}, {0x1}, {0x1, 0x9}, {0x6, 0x5}, {0x2, 0x2}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x7}, {0x0, 0x2}, {0x4, 0x8}, {0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xd82cb239723bf0e2, 0x1b, 0x12, 0xc, 0x30, 0x2, 0x6, 0x0, 0x6, 0xb, 0x36, 0x1b, 0x1b, 0x18, 0x6, 0x0, 0x1fb9ab058bffc5b7, 0xb, 0x48, 0x9, 0x47, 0x2, 0x36, 0x18, 0x2a]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x1, 0x18, 0x36, 0x18, 0x0]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x2}, {0x7, 0x4}, {0x2, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x7, 0x6}, {0x3, 0xa}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x2, 0x3}, {0x3, 0x3}, {0x6, 0x8}, {0x3, 0x5}, {0x1}, {0x5, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0x6}, {0x7, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x1, 0x2}, {0x3, 0x4}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x5}, {0x6}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x401, 0x2, 0x80, 0x7, 0x8001]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x9}, {0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x1, 0x6}, {0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x1}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x3, 0x6}, {0x7}, {0x7}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x7, 0xa}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x6}, {}, {0x1, 0x2}, {0x6, 0x5}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0x5}, {0x2, 0x6}, {0x2, 0x5}, {0x5}, {}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xff, 0x1, 0xd877, 0x5, 0x7, 0xa1, 0x400]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3d4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf9f9, 0x53, 0xfff7, 0x6, 0x2f, 0x1, 0x675, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x6c, 0x6c, 0x24, 0x5, 0x1b, 0x6, 0x1, 0x36, 0x16, 0x6, 0x3, 0x30, 0xb, 0x2, 0x3, 0xc, 0x6, 0x1b, 0x6, 0x4, 0xc, 0x30]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x2}, {0x4, 0x3}, {0x3, 0x7}, {0x7, 0x5}, {0x6, 0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {}, {0x0, 0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x7}, {0x3, 0x7}, {0x4, 0x2}, {0x7, 0xa}, {0x7, 0x8}, {0x4}, {0x3, 0x6}, {0x1}, {0x1}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0xa}, {0x7, 0x8}, {0x6, 0x2}, {0x6}, {0x0, 0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xfffc, 0x7ff, 0x2, 0x1ff, 0x3, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3f, 0x9, 0xfffd, 0xffff, 0x5, 0x6, 0xa9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x652, 0x6, 0x6, 0x1, 0x6, 0x0, 0x9]}}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x7, 0xa}, {0x4}, {0x5, 0x3}, {0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x4}, {0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x0, 0x1}, {0x7}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x2, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x1}, {0x3, 0x8}, {0x4, 0x8}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x9}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0x7}, {0x3, 0xa}, {0x5, 0x1}, {0x0, 0x5}, {}, {0x7}, {0x1, 0x1}, {0x6, 0x2}, {0x4, 0x4}, {0x2, 0x7}, {}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0xa}, {0x7, 0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x4}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x6, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x3, 0x2}, {0x7, 0x9}, {0x5, 0x1}, {0x4, 0x5}, {0x6}, {0x4, 0x6}, {0x2, 0x5}, {0x4, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x3, 0x4}, {0x2, 0x7}, {0x4, 0x2}, {0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x4, 0xffff, 0x4, 0x3f8, 0x1, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x1}, {0x4, 0x7}, {0x1}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x6}, {0x7, 0x3}, {0x4, 0x4}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x6}, {0x4}, {0x5, 0x1}, {0x6}, {0x4, 0x4}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x9}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x5, 0x1}, {0x5}, {0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x6}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x7}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0x1b, 0x5, 0x30, 0x24, 0x18, 0x9, 0x0, 0x18, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x12, 0x6, 0x18, 0xb, 0x36, 0x6, 0xb, 0x36, 0xb, 0xb, 0x18, 0x36, 0x30, 0x30, 0x3e, 0x59, 0x1b, 0xb, 0x36, 0x9, 0x9, 0x16, 0x36]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x4}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x2}, {0x7, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0xa}, {0x7, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x2}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0xa}]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffe1, 0x4, 0x40, 0x7ff, 0xbb8d, 0x1, 0xe6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x200, 0x0, 0x4, 0x1ff, 0x7, 0x20, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x9}, {0x4, 0x3}, {0x3, 0xa}, {0x6, 0x2}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x3}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {}, {0x6, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x7, 0x9}, {0x6, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6d, 0x8000, 0x6, 0xca, 0x0, 0x1000, 0x101]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x1b, 0x48, 0x3, 0x18, 0x12, 0x48, 0x5, 0x6, 0x3, 0x30, 0x1, 0x4, 0x2, 0x18]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x9}, {0x1, 0x7}, {0x1}, {0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x4, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x5, 0x4}, {0x7, 0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x6}, {0x4}, {0x0, 0x3}, {}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x4, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf197, 0x5, 0x8000, 0x4, 0x4, 0x3f, 0x4, 0x1800]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xe717, 0x32, 0x1, 0x0, 0xf8f6, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x18, 0x6c, 0x1, 0xa1444fe541036c45, 0x6c, 0x18, 0x60, 0x30, 0x2, 0x2, 0x9, 0x36, 0xb, 0x60, 0x3, 0x36, 0x2, 0x43, 0x24, 0x1b, 0xc, 0x12, 0x3, 0x12, 0x3, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x60, 0x1, 0x0, 0x2, 0x3, 0x4, 0x6c, 0x2, 0x24, 0x18, 0x0, 0x48, 0x5, 0x18, 0x1, 0x16, 0x6, 0x6, 0x1, 0x20, 0x30, 0x48, 0xc, 0x24, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x14, 0xb, 0x6]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x5}, {}, {0x5, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x9}, {0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x4, 0x3}, {0x1, 0x7}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x6}, {0x5, 0x4}, {0x1, 0x8}, {0x5}, {0x6, 0x1}, {0x1, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x2}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x3}, {0x3, 0x4}, {0x7, 0x4}, {}, {0x6, 0x7}, {0x1, 0xa}, {0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x1}, {0x4, 0x4}, {0x7, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x5}, {0x1}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0xa}, {}, {0x5, 0x4}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0x9}, {0x7, 0x2}, {0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x3, 0x8}, {0x6, 0x9}, {0x5}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x48, 0x5, 0x48, 0x60, 0x3, 0x6, 0x6, 0x30, 0x24, 0x12, 0x6c, 0x24, 0xc, 0x48, 0x16, 0x2, 0x5, 0x24, 0x18, 0x9, 0x4, 0xb, 0x3, 0x36, 0x4, 0x9, 0x4, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x81, 0x2, 0xe100, 0x9, 0x8, 0xc26]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x304, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0xa}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x6, 0x5}, {0x6, 0x6}, {0x7, 0x5}, {0x0, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x16, 0x5, 0x16, 0x3, 0x4, 0x30, 0x5, 0x48, 0x1b, 0x48, 0x4, 0x9, 0x9, 0x4, 0x6, 0xb, 0x2, 0x16, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x2, 0x7}, {0x5}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x1}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x7, 0x1}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x5, 0x4}, {0x6}, {0x1, 0x4}, {0x1, 0x9}, {0x5, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x6}, {0x3, 0x2}, {}, {0x4, 0x4}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0xa}, {0x2}, {0x4, 0x6}, {0x2, 0x9}, {0x3, 0x3}, {0x4, 0x6}, {0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x4, 0xa}, {0x6, 0x8}, {0x2, 0x5}, {0x7}, {0x3, 0x9}, {0x2, 0x6}, {0x5, 0x1}, {0x3}, {0x4, 0x4}, {0x7}, {0x1, 0xa}, {}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x8}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x6}, {0x5}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x1a}, {0x0, 0x9}, {0x7, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x9}, {0x0, 0x9}, {0x2, 0x7}, {0x5, 0x9}, {0x4, 0x2}, {0x6, 0x6}, {0x6}, {0x5, 0x2}, {0x3, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x4}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xc176dc8847bfe64a}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb04b3ba22968fc29, 0xc, 0x36, 0x2, 0x6, 0x24, 0x12, 0x18, 0x36, 0x4, 0x3, 0x2, 0x0, 0x24, 0xc, 0x24]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x36, 0xc, 0x6c, 0x12, 0x5, 0x36, 0x30, 0x1, 0x4, 0xc, 0xb, 0x60, 0x18, 0x4, 0x4, 0x4, 0x48, 0x0, 0x1, 0x4, 0x9c4048642f38528d, 0x60, 0x24, 0x1, 0x0, 0x48, 0x12, 0x18, 0x1b, 0x0, 0x9]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x9423, 0x8000, 0x8001, 0xc9, 0x100, 0xff54]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x48, 0x9, 0x16, 0x55, 0x9, 0x24, 0x48, 0x31, 0x9, 0x48, 0x6, 0xb, 0x48, 0x55, 0xdc, 0x6, 0x4, 0x12, 0x12, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4e9, 0x101, 0x5, 0x100, 0x4, 0x8000, 0x2]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0xb, 0xc, 0x48, 0x2, 0x18, 0x4, 0x9, 0x16, 0x24, 0x6e, 0x13, 0x3, 0x4a, 0x5, 0x6, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf999, 0xfffa, 0x7ff, 0x4, 0x8, 0x6, 0x1ff]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x5}, {0x6, 0x6}, {0x7, 0x2}, {0x4, 0x8}, {0x6, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0x5}, {0x2, 0x2}, {0x3, 0x2}, {0x0, 0x3}, {0x2, 0x7}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x3}, {0x3, 0x7}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x9}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0x9}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x2}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0xa}, {0x3, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x3, 0x8}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x3, 0x6c, 0xb, 0x4, 0x16, 0x12, 0xb, 0x6c, 0x48, 0x6, 0xb, 0x5]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x21, 0x36, 0x6, 0x16, 0x16, 0x60, 0x1]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x6}, {0x6}, {0x3, 0x8}, {0x7, 0x8}, {0x4, 0x6}, {0x5}, {0x6, 0x8}, {0x6, 0x9}, {0x7, 0xa}, {0x4, 0x8}, {0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x5, 0x2}, {0x7, 0x9}, {0x1}, {0x4, 0x3}, {0x2, 0x7}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x2, 0x3}, {0x5, 0x5}, {0x1, 0x1b}, {0x1, 0x2}, {0x1, 0x4}, {0x4}, {0x4, 0x3}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x2, 0x4}]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x18, 0xb, 0x1, 0x60, 0x5, 0x36, 0x18, 0x6, 0x48, 0x16, 0x4, 0x48, 0x1, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7cd8, 0x2, 0x9, 0x4, 0x4, 0x1, 0xbcf, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3f, 0x7, 0xc8d, 0x7, 0x1ff, 0x400, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9f0f8914f1841dc9}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x23, 0x2, 0x48, 0x1, 0xc, 0x60, 0x60, 0x18, 0xc, 0x1b, 0x18, 0x48, 0x60, 0x36, 0x6c, 0x4, 0x74, 0x48, 0x60, 0x4, 0x18, 0x12, 0x2, 0x2]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x69}]}]}, @NL80211_ATTR_TID_CONFIG={0x300, 0x11d, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffeffff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x4, 0x60, 0x16, 0x48, 0x4, 0x9, 0x6, 0x18, 0xb, 0x12, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1fc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x9, 0x5, 0x1, 0xc, 0xc, 0x16, 0x6, 0x48, 0x6, 0x2, 0x9, 0x4, 0x60, 0x3, 0x4, 0xc, 0x1b, 0x12, 0x36, 0x6c, 0x18, 0x2f, 0x6c, 0x3, 0x2, 0x1b]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0x9}, {0x2, 0x4}, {0x5, 0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x7}, {0x2, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x7, 0x9}, {0x3, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x8}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x5}, {0x1}, {0x1, 0x8}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x3}, {0x4, 0x7}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x6, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x7, 0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x7}, {0x2, 0x8}, {0x6, 0x1}, {0x5, 0x8}, {0x0, 0x4}, {0x4, 0xa}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x6}, {0x3, 0xa}, {0x7, 0x8}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x4, 0x2}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x6, 0x6}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x6}, {0x0, 0x7}, {0x7, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x14c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x4}, {0x5, 0x9}, {0x2, 0x7}, {0x5}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x7, 0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x3, 0x2}, {0x2}, {0x0, 0x3}, {0x7, 0xa}, {0x4, 0x9}, {0x5}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x2}, {0x4, 0xa}, {0x2}, {0x0, 0x6}, {0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x5, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {}, {0x3, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x3, 0x6}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x5, 0x2}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f44, 0x2, 0x2, 0x3, 0x7fff, 0x7fff, 0x1, 0xfff]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0x1}, {0x6, 0x2}, {0x2}, {0x3, 0x5}, {0x5, 0x8}, {0x7, 0x5}, {0x1, 0xa}, {0x5, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x3, 0x6}, {0x5, 0x2}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x3}, {0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x7}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x4}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x4}, {0x3, 0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x5}, {0x4}, {0x1, 0xa}, {0x3}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x3}, {0x7}, {0x5, 0x6}, {0x1, 0x8}, {0x2, 0x6}, {0x2}, {0x2, 0x8}, {0x3, 0x8}, {0x3, 0x2}, {0x0, 0x6}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x7}, {0x5, 0x8}, {0x4, 0x7}, {0x2, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{}, {0x3, 0x9}, {0x0, 0x2}, {0x2}, {0x1, 0x2}, {0x1, 0x7}, {}, {0x7, 0x6}, {0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x9}, {0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x5, 0x4}, {0x6, 0x7}, {0x2}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0x5}, {}, {0x1, 0xa}, {0x5, 0x2}, {0x3, 0x7}, {0x5, 0x9}, {0x4}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0xa}, {0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x5, 0x8}, {0x1}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0x1}, {0x2, 0x6}, {0x7, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x7}, {0x2, 0x4}, {0x1, 0x6}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe18}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x24, 0x16, 0x1b, 0x6, 0x12, 0x48, 0x30, 0x63, 0x12, 0x16, 0x37, 0x5, 0x5e, 0x24, 0x36, 0x9]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x1, 0x2, 0x18, 0x6c, 0x1b, 0x18, 0x16]}]}, @NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x30, 0x18, 0x18, 0x60, 0x18, 0x4, 0x9, 0xc, 0x30, 0x1, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x7}, {0x5, 0x1}, {0x3, 0x9}, {0x7}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x5, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0xa}, {0x5, 0x9}, {0x4, 0x8}, {0x4, 0x1}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x3}, {0x0, 0x9}, {0x3, 0x2}, {0x7, 0xa}, {0x6, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x2}, {0x5, 0x6}, {0x1, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0xa}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x6}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0xc, 0xb, 0x24, 0x30, 0x2, 0xc, 0x18, 0x48, 0x12, 0x5, 0x12, 0xb, 0xc7a53fbe4ff3a62e, 0x16, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x100, 0x1, 0x8000, 0x7, 0x1, 0x0, 0x1000]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0xb, 0x16, 0x18, 0x18, 0x1b, 0x4, 0x24, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x6, 0x5}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x2, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0x8}, {0x2, 0x2}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x3, 0x2}, {0x3, 0x5}, {0x4, 0xa}, {0x5, 0x4}, {0x3, 0x7}, {0x4, 0x4}, {}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x7}, {}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0xa}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0x7}, {0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0x4}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x8}, {0x2, 0x8}, {0x3, 0x2}, {0x2, 0x6}, {0x4}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0xa}, {0x5, 0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x2}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x2}, {0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x5}, {0x4, 0x3}, {0x2, 0x5}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x0, 0x3, 0xfff, 0x1000, 0x9, 0x457d]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x0, 0x24, 0x1, 0x9, 0x48, 0x60, 0x18, 0x4, 0x2d, 0x16, 0x60, 0x1b, 0xc, 0x2, 0x3, 0x48, 0x4, 0x1b, 0x60, 0x12, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x5, 0x0, 0x16, 0x6, 0x36, 0x9, 0x9, 0x9]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x7, 0x4}, {0x2, 0x8}, {0x4, 0x13}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x6, 0x4}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0xa}, {0x5}, {}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x2}, {}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x4}, {0x6, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x2, 0x9}, {0x4, 0x9}, {}, {0x2, 0x8}, {0x1, 0x3}, {0x6, 0x9}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x7, 0x5}, {0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x4}, {0x2, 0x7}, {0x1, 0x6}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x6, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x2, 0x3}, {0x7, 0x6}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x4, 0x3}, {0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x5}, {0x4, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xad}]}]}]}, 0xf20}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x79}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x20000005) r5 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', 0x80, 0x20) fcntl$getflags(r5, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000104}, 0x40040) r8 = dup2(r0, r5) ioctl$PTP_PIN_SETFUNC(r8, 0x40603d07, &(0x7f0000002b40)={'\x00', 0x9, 0x3, 0x8000}) [ 105.995765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.998602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.999144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.003393] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.004377] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.007079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.039416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.040251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.042367] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.043286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.044423] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.071594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.072138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.074363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.075019] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.135021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.136597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.136884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.142005] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.148195] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.148414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.151155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.154030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.157758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.165959] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.166513] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.167125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.174619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.174849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.175098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.175332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.175596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.175808] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 106.176103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.183847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.184072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.192602] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 106.192832] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.193177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.201543] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.201865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.202100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.202310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.229729] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.230294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.244087] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.255199] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.257428] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 108.061424] Bluetooth: hci2: command tx timeout [ 108.245533] Bluetooth: hci4: command tx timeout [ 108.245566] Bluetooth: hci1: command tx timeout [ 108.309984] Bluetooth: hci7: command tx timeout [ 108.311216] Bluetooth: hci6: command tx timeout [ 108.311529] Bluetooth: hci3: command tx timeout [ 108.311689] Bluetooth: hci5: command tx timeout [ 108.311827] Bluetooth: hci0: command tx timeout [ 110.101303] Bluetooth: hci2: command tx timeout [ 110.293546] Bluetooth: hci1: command tx timeout [ 110.293571] Bluetooth: hci4: command tx timeout [ 110.357166] Bluetooth: hci6: command tx timeout [ 110.357835] Bluetooth: hci0: command tx timeout [ 110.357902] Bluetooth: hci5: command tx timeout [ 110.357958] Bluetooth: hci3: command tx timeout [ 110.358014] Bluetooth: hci7: command tx timeout [ 112.149527] Bluetooth: hci2: command tx timeout [ 112.340629] Bluetooth: hci1: command tx timeout [ 112.341843] Bluetooth: hci4: command tx timeout [ 112.405667] Bluetooth: hci6: command tx timeout [ 112.406643] Bluetooth: hci7: command tx timeout [ 112.406707] Bluetooth: hci3: command tx timeout [ 112.406761] Bluetooth: hci5: command tx timeout [ 112.406815] Bluetooth: hci0: command tx timeout [ 114.198894] Bluetooth: hci2: command tx timeout [ 114.388604] Bluetooth: hci4: command tx timeout [ 114.388622] Bluetooth: hci1: command tx timeout [ 114.452624] Bluetooth: hci0: command tx timeout [ 114.452749] Bluetooth: hci6: command tx timeout [ 114.452854] Bluetooth: hci5: command tx timeout [ 114.452930] Bluetooth: hci3: command tx timeout [ 114.453006] Bluetooth: hci7: command tx timeout [ 165.846324] syz-executor.3 (284) used greatest stack depth: 23952 bytes left [ 168.646349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.665347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.677716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.682012] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.682200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.682673] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.682917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.687597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.687836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.688048] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.688247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.690724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.701808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.705413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.705659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.705848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.708713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.711280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 168.712192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.714065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.714288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 168.719662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.725129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.735401] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.741843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.743913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.749697] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.780743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.785013] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.787228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.789421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.792705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.798723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.801535] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.803319] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 168.803547] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 168.804287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.807598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.813926] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.847997] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.870746] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 168.881573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.116170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.150722] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.152284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.160165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.163366] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 169.182701] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.772599] Bluetooth: hci2: command tx timeout [ 170.772706] Bluetooth: hci1: command tx timeout [ 170.774255] Bluetooth: hci3: command tx timeout [ 170.836532] Bluetooth: hci0: command tx timeout [ 170.900556] Bluetooth: hci5: command tx timeout [ 171.092705] Bluetooth: hci6: command tx timeout [ 171.157671] Bluetooth: hci4: command tx timeout [ 171.349544] Bluetooth: hci7: command tx timeout [ 172.820643] Bluetooth: hci3: command tx timeout [ 172.820658] Bluetooth: hci2: command tx timeout [ 172.821796] Bluetooth: hci1: command tx timeout [ 172.885931] Bluetooth: hci0: command tx timeout [ 172.948740] Bluetooth: hci5: command tx timeout [ 173.140557] Bluetooth: hci6: command tx timeout [ 173.204780] Bluetooth: hci4: command tx timeout [ 173.396609] Bluetooth: hci7: command tx timeout [ 174.868563] Bluetooth: hci1: command tx timeout [ 174.868683] Bluetooth: hci3: command tx timeout [ 174.868793] Bluetooth: hci2: command tx timeout [ 174.932863] Bluetooth: hci0: command tx timeout [ 174.998507] Bluetooth: hci5: command tx timeout [ 175.192008] Bluetooth: hci6: command tx timeout [ 175.254486] Bluetooth: hci4: command tx timeout [ 175.446512] Bluetooth: hci7: command tx timeout [ 176.916602] Bluetooth: hci2: command tx timeout [ 176.918530] Bluetooth: hci1: command tx timeout [ 176.919643] Bluetooth: hci3: command tx timeout [ 176.981543] Bluetooth: hci0: command tx timeout [ 177.049731] Bluetooth: hci5: command tx timeout [ 177.246512] Bluetooth: hci6: command tx timeout [ 177.301634] Bluetooth: hci4: command tx timeout [ 177.493621] Bluetooth: hci7: command tx timeout [ 230.598316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.604740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.608161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.650235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.690091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.692616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.695536] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.697923] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.699119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.724532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.727731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.729081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.731676] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.733370] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.734594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.738238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.739899] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.740383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.771377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.774001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.777292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.780974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.783253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.784993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.813014] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.814585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.815687] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.828726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.830460] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.833783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.982411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 231.017376] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 231.032163] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.045262] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 231.063770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.125549] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.147190] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.154090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 231.174730] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 231.176949] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.207751] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.209502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.434109] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.567758] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.592781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.814550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.941745] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 231.991618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.788716] Bluetooth: hci2: command tx timeout [ 232.789562] Bluetooth: hci0: command tx timeout [ 232.789604] Bluetooth: hci1: command tx timeout [ 232.853917] Bluetooth: hci4: command tx timeout [ 232.854262] Bluetooth: hci3: command tx timeout [ 233.364600] Bluetooth: hci7: command tx timeout [ 233.431547] Bluetooth: hci5: command tx timeout [ 234.133601] Bluetooth: hci6: command tx timeout [ 234.836666] Bluetooth: hci0: command tx timeout [ 234.837760] Bluetooth: hci1: command tx timeout [ 234.837922] Bluetooth: hci2: command tx timeout [ 234.900570] Bluetooth: hci3: command tx timeout [ 234.901625] Bluetooth: hci4: command tx timeout [ 235.413515] Bluetooth: hci7: command tx timeout [ 235.478337] Bluetooth: hci5: command tx timeout [ 236.181534] Bluetooth: hci6: command tx timeout [ 236.884539] Bluetooth: hci1: command tx timeout [ 236.884558] Bluetooth: hci0: command tx timeout [ 236.885500] Bluetooth: hci2: command tx timeout [ 236.962094] Bluetooth: hci4: command tx timeout [ 236.962210] Bluetooth: hci3: command tx timeout [ 237.460522] Bluetooth: hci7: command tx timeout [ 237.524756] Bluetooth: hci5: command tx timeout [ 238.228528] Bluetooth: hci6: command tx timeout [ 238.933487] Bluetooth: hci1: command tx timeout [ 238.934160] Bluetooth: hci2: command tx timeout [ 238.934302] Bluetooth: hci0: command tx timeout [ 238.996635] Bluetooth: hci3: command tx timeout [ 238.996898] Bluetooth: hci4: command tx timeout [ 239.509482] Bluetooth: hci7: command tx timeout [ 239.573077] Bluetooth: hci5: command tx timeout [ 240.276624] Bluetooth: hci6: command tx timeout [ 293.180162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.181086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.181568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.183294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.184239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.184708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.268919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.284574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.286513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.326880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.348697] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.351828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.357753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.360877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.365115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.377212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.386889] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.388732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.493959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.501128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.506718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.516736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.518758] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 293.520538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.547061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.559644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.577154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.586317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.616550] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.632640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.654115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.678923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.691858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.701292] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.711119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 293.720728] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 293.723991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.727534] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.737293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.742325] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.752880] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 293.757223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.758647] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 293.759309] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.790731] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 293.812354] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.820072] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 293.830649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.256676] Bluetooth: hci0: command tx timeout [ 295.384545] Bluetooth: hci1: command tx timeout [ 295.450108] Bluetooth: hci2: command tx timeout [ 295.573920] Bluetooth: hci3: command tx timeout [ 295.765935] Bluetooth: hci4: command tx timeout [ 295.893610] Bluetooth: hci7: command tx timeout [ 295.893939] Bluetooth: hci5: command tx timeout [ 296.021830] Bluetooth: hci6: command tx timeout [ 297.301477] Bluetooth: hci0: command tx timeout [ 297.428669] Bluetooth: hci1: command tx timeout [ 297.492687] Bluetooth: hci2: command tx timeout [ 297.621706] Bluetooth: hci3: command tx timeout [ 297.812483] Bluetooth: hci4: command tx timeout [ 297.940529] Bluetooth: hci5: command tx timeout [ 297.941211] Bluetooth: hci7: command tx timeout [ 298.069521] Bluetooth: hci6: command tx timeout [ 299.350473] Bluetooth: hci0: command tx timeout [ 299.476509] Bluetooth: hci1: command tx timeout [ 299.564329] Bluetooth: hci2: command tx timeout [ 299.672633] Bluetooth: hci3: command tx timeout [ 299.867459] Bluetooth: hci4: command tx timeout [ 299.995467] Bluetooth: hci7: command tx timeout [ 299.995578] Bluetooth: hci5: command tx timeout [ 300.117522] Bluetooth: hci6: command tx timeout [ 301.397625] Bluetooth: hci0: command tx timeout [ 301.524531] Bluetooth: hci1: command tx timeout [ 301.588554] Bluetooth: hci2: command tx timeout [ 301.716677] Bluetooth: hci3: command tx timeout [ 301.909484] Bluetooth: hci4: command tx timeout [ 302.037648] Bluetooth: hci5: command tx timeout [ 302.037774] Bluetooth: hci7: command tx timeout [ 302.164798] Bluetooth: hci6: command tx timeout [ 355.678255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.706126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.722032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.762005] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.781983] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 355.789975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.871196] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.873420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.874845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.877553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.879516] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 355.881170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.001279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.003670] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.004351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.006531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.008987] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.009551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.134944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.144808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.150839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.168172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.174515] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.184317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.196185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.207538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.218200] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.234700] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.239119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.262755] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 356.265114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.267761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.274991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.278849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.308550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.311678] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.314910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.318368] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.321179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.336797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.349698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 356.355620] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 356.356248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 356.356566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.371130] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 356.396065] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 356.406504] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 356.410858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 357.846066] Bluetooth: hci0: command tx timeout [ 357.909799] Bluetooth: hci1: command tx timeout [ 358.036522] Bluetooth: hci2: command tx timeout [ 358.228648] Bluetooth: hci3: command tx timeout [ 358.356992] Bluetooth: hci5: command tx timeout [ 358.420522] Bluetooth: hci6: command tx timeout [ 358.420572] Bluetooth: hci4: command tx timeout [ 358.551462] Bluetooth: hci7: command tx timeout [ 359.893490] Bluetooth: hci0: command tx timeout [ 359.957486] Bluetooth: hci1: command tx timeout [ 360.086506] Bluetooth: hci2: command tx timeout [ 360.278465] Bluetooth: hci3: command tx timeout [ 360.405660] Bluetooth: hci5: command tx timeout [ 360.469490] Bluetooth: hci4: command tx timeout [ 360.469512] Bluetooth: hci6: command tx timeout [ 360.596654] Bluetooth: hci7: command tx timeout [ 361.940466] Bluetooth: hci0: command tx timeout [ 362.004487] Bluetooth: hci1: command tx timeout [ 362.132509] Bluetooth: hci2: command tx timeout [ 362.324699] Bluetooth: hci3: command tx timeout [ 362.452525] Bluetooth: hci5: command tx timeout [ 362.518452] Bluetooth: hci4: command tx timeout [ 362.518553] Bluetooth: hci6: command tx timeout [ 362.645472] Bluetooth: hci7: command tx timeout [ 363.988678] Bluetooth: hci0: command tx timeout [ 364.052619] Bluetooth: hci1: command tx timeout [ 364.180556] Bluetooth: hci2: command tx timeout [ 364.372595] Bluetooth: hci3: command tx timeout [ 364.500482] Bluetooth: hci5: command tx timeout [ 364.564479] Bluetooth: hci6: command tx timeout [ 364.564584] Bluetooth: hci4: command tx timeout [ 364.692602] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:54:39 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff815ac9d9 RCX=0000000000000001 RDX=1ffff110012c1f24 RSI=ffff88800960fca8 RDI=ffffffff815ac9d9 RBP=ffff88800960f920 RSP=ffff88800960f8a0 R8 =0000000000000001 R9 =ffff88800960f908 R10=000000000003ab6c R11=0000000000022b17 R12=ffff88800960f990 R13=0000000000000000 R14=ffff8880095eb780 R15=ffff88800c5bbde0 RIP=ffffffff81421f9f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb59acde1f0 CR3=000000003834a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86773d8e RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88803e58f9ba RSP=ffff88803e58f908 R8 =ffffffff86773d92 R9 =ffff88803e58f9b8 R10=000000000003ab6c R11=0000000000000003 R12=ffff88803e58f9d8 R13=ffff88803e58f9c0 R14=ffff88803e58ff58 R15=ffff88803e58f978 RIP=ffffffff8134a3e9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcd7b78e40 CR3=000000000c5f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000