[ 62.518774] audit: type=1400 audit(1737566492.695:6): avc: denied { checkpoint_restore } for pid=219 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:15594' (ECDSA) to the list of known hosts. 2025/01/22 17:21:40 fuzzer started 2025/01/22 17:21:40 dialing manager at localhost:38529 syzkaller login: [ 71.033545] cgroup: Unknown subsys name 'net' [ 71.150431] cgroup: Unknown subsys name 'cpuset' [ 71.188700] cgroup: Unknown subsys name 'rlimit' [ 77.136860] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 88.863565] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 17:21:59 syscalls: 216 2025/01/22 17:21:59 code coverage: enabled 2025/01/22 17:21:59 comparison tracing: enabled 2025/01/22 17:21:59 extra coverage: enabled 2025/01/22 17:21:59 setuid sandbox: enabled 2025/01/22 17:21:59 namespace sandbox: enabled 2025/01/22 17:21:59 Android sandbox: enabled 2025/01/22 17:21:59 fault injection: enabled 2025/01/22 17:21:59 leak checking: enabled 2025/01/22 17:21:59 net packet injection: enabled 2025/01/22 17:21:59 net device setup: enabled 2025/01/22 17:21:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 17:21:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 17:21:59 USB emulation: enabled 2025/01/22 17:21:59 hci packet injection: enabled 2025/01/22 17:21:59 wifi device emulation: enabled 2025/01/22 17:21:59 802.15.4 emulation: enabled 2025/01/22 17:21:59 fetching corpus: 0, signal 0/0 (executing program) 2025/01/22 17:22:01 starting 8 fuzzer processes 17:22:01 executing program 1: semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f0000000000)=0x6b9b) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000040)=""/118) semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f00000000c0)=""/152) r0 = semget(0x0, 0x2, 0x40) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000180)=[{0x4, 0x77}, {0x3, 0x8, 0x800}], 0x2, &(0x7f0000000200)={r1, r2+60000000}) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000240)=""/105) getgroups(0x3, &(0x7f00000002c0)=[0xee01, 0x0, 0xee00]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0xffffffffffffffff, r3, 0xee00, 0xffffffffffffffff, 0xdb, 0x200}, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000380)=""/93) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f00000004c0)=""/134) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000580)=""/39) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x3f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x40, 0x73}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xff, 0x7, 0xdd, 0x10, 0xed}, 0x19, &(0x7f0000000640)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "289183ebbef79f9000e9e5c83d2a5f62"}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x42, &(0x7f00000006c0)=@string={0x42, 0x3, "87663567429639b0f3d28b80a014bf81c4b8ac941ec4e9acd55811f9425f7cad6b0a546ac49d1dcb0304bcecaed79d195e73ebf3b54f0c31d99cd2a68615d186"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x300a}}]}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x178, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x89aa}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x10001]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x63]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc97}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7ef0, 0x800, 0x81]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9c}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3a2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffb}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x1, 0x2, 0xb75, 0x10000000, 0x7, 0x80, 0x6, 0x2, 0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1cf}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x459}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffe1}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x42}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x615}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x20}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x734}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8840}, 0x80) r4 = semget$private(0x0, 0x1, 0x202) semctl$SEM_STAT_ANY(r4, 0x1, 0x14, &(0x7f0000000a00)=""/64) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f0000000a40)=""/215) semctl$IPC_INFO(r4, 0x2, 0x3, &(0x7f0000000b40)=""/44) semctl$GETZCNT(r4, 0x1, 0xf, &(0x7f0000000b80)=""/153) 17:22:01 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x26}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x6, 0x8000]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040815}, 0x4004000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9c9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000040) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4be}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x4000080) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000840), 0x282000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r9, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x7}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5a2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xd0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) [ 91.310087] audit: type=1400 audit(1737566521.490:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:22:01 executing program 2: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x350, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x23e, 0x7f, [@link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @random_vendor={0xdd, 0xa9, "dfebde24a2107551c244f00352826a5058148b0d337c126dcb2228fe1e5d128580662f3e27cdb63c35a57f871cd49888000456d86253402bf81e56f065bf2efaa5aa58c80dfc97668969429237f4b2456ce4a35b1c52c5405fcd9356646c967e7e7c65edeb2314fde0ed8923654a03f10ad1b3d870317827967fba67c7b33ace7707fd9df13b10f354d5f16e39228ff577427326aa563667ab7067c8792455aa27712ae6d6803dbdae"}, @tim={0x5, 0x43, {0x7f, 0xc0, 0x1, "2128b9288e34cc488e81418ecc7b48b9f116ca8ed80939b9c314d048cb34f9d9064ec5fb4b04e46571bf5f4f8bb27b267a12b9c51c3963273999572f60e19aa6"}}, @channel_switch={0x25, 0x3, {0x0, 0xb9, 0x9}}, @random={0xe3, 0xed, "3979f0835b18ce3655ce0d1085a8f0571e3b48c93c7da928207f9118acf681b6c3f620b4cc889a3b61a71608362a9f3a3eae0b07dc35ca486cc2cc26d08faf52cdb3cd2bc10033f7654ccede66c85bf839b1cfb8e4d74b8860d09df7135cf90b2d6544f8943d7560615529d7bafd7289c6048b479f0b5930e60bae8dcadbf25c8853b67f73cc4f0943f06c93c95d849c686ea4a4848712a48609c8b0d89bb419f72db61caf6250a82aedc39929446fad51220b4402392d037f7f25a53b6a49941fb6b89da08fb356204dc3d46b62411ec0b6c2b7db1314f811119206ab75d3959531414f75eb456de89bfe958a"}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x49, 0x4, 0x32, 0x800}}, @preq={0x82, 0x30, @not_ext={{0x0, 0x0, 0x1}, 0x5, 0x0, 0xb15f, @device_b, 0x2, "", 0x1, 0xbc4f, 0x2, [{{0x1}, @broadcast, 0x9}, {{}, @broadcast, 0x101}]}}]}, @NL80211_ATTR_IE={0xfc, 0x2a, [@tim={0x5, 0xdc, {0x30, 0x92, 0x0, "f611eed849f5fe30f2f8d4672c7e7138f70c6e2a513b99226417286b5c0930cc605cb3e909feec2320e974fdc89b06a89e62be1963fa1fc0ed623ac1daa2155a19e3ac36608bf1834bffd61e3e9073797b2dd982b6afac2fdf14b65dac56b46f45d22bbb421660ea2905faeb794fcf400b511d79cda18ca2059eaa1306b3f660568d49f3f78472cec470f782d30d21c940094dd9010d73479242d2b665830a669215757c8e3743aa9ddbd86d3267ea0a2b13260817a24f29d7f018255c528f8a79d84b6f4a932f78fdc288838abb8f10516dadaab2fc24bd7a"}}, @mic={0x8c, 0x10, {0x74c, "cc7bc5ba5e3e", @short="81873f42f1e6e5b5"}}, @mesh_id={0x72, 0x6}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1d4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x183, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x20}}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x3f, @device_a, 0x5, "", 0x4, 0x400, @device_b, 0xc5}}, @ssid={0x0, 0xd, @random="f9b35d33899d6d90baaa13d745"}, @mic={0x8c, 0x10, {0xd3a, "1ebeb1d4ea7e", @short="fea8bb3a58f1c414"}}, @mic={0x8c, 0x18, {0x47f, "c0f09d77e14a", @long="ba0a90b026012ce3c3d9b7271ce0783d"}}, @ibss={0x6, 0x2, 0xec}, @perr={0x84, 0x114, {0x0, 0x10, [@ext={{}, @broadcast, 0x6, @device_a, 0x2a}, @not_ext={{}, @device_a, 0x1, "", 0x3}, @ext={{}, @device_a, 0x3, @device_a, 0x2a}, @ext={{}, @broadcast, 0x8, @device_a, 0x13}, @ext={{}, @broadcast, 0x80000000, @device_b, 0x14}, @ext={{}, @broadcast, 0x3f, @device_a, 0x8}, @ext={{}, @device_a, 0x9, @broadcast, 0x2d}, @ext={{}, @device_b, 0x7, @broadcast, 0x14}, @ext={{}, @device_b, 0x6, @device_a, 0x2e}, @ext={{}, @device_a, 0x2, @device_b, 0xb}, @not_ext={{}, @broadcast, 0xfffffff8, "", 0x15}, @not_ext={{}, @broadcast, 0xc7c, "", 0x42}, @not_ext={{}, @broadcast, 0xef, "", 0x4}, @not_ext={{}, @device_a, 0x6, "", 0x4}, @ext={{}, @device_a, 0x4, @device_a, 0x26}, @ext={{}, @device_a, 0x3, @device_a, 0x33}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x3c, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x58, 0xb9, 0xa0}}, @dsss={0x3, 0x1, 0xb5}, @erp={0x2a, 0x1, {0x1}}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x21}}, @gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0x5}, @cf={0x4, 0x6, {0x2, 0x2, 0x5}}]}]}, 0x1d4}}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x413, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000010) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x76}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004084}, 0x40) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) r4 = accept4(r0, &(0x7f0000000c00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80, 0xb1ffad1a18f9cc36) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000005) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001080)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x1a4, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xe1, 0xac, "5d15223c3096e3bd63c7d2e161901d9002c3b0d54bdef227b06dcfe1a23c640c69a329aee463179f30d883a4ebc3c1899ed2f0fa9449403e491d0d6dd2b7504bbd37f4e4257ed2bd77a93e5f5807324f4c80bae90e1ceb77ea59bb004de3eb31e79d14455ff9b218e1a58a7566c3ea6d55e711221a011616b90fde2f7c0f29177535ac6fbab0724ae39ed84384abbd1e9d3aa3231bcda3edd3e61b80e63166f14edf6f38a792fd6389f90326b993e833a9756ad147c393bf1ef38400817f834f8ff97a2ee46242f33e3832fab778da22da31574062f593b371a5aaa5b2"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x76, 0xac, "71bff65a0f2458c719934ac14fe1a0a29e78e287d92b04907eff1bc60ca28ba8a3f9d6b021b619f4b6ff43369fab695d76a50a49e4395bf0b9a47e36809e5c07b9126bba842d18c49d247ecba407303d6a0726c52059473406cc7cbe4b2286b347ced9f12fbc63bf065c0480343ef89029c3"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x1a4}, 0x1, 0x0, 0x0, 0xc80c4}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x74, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x74}}, 0x4000080) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x8040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001440)={'syztnl1\x00', &(0x7f0000001340)={'erspan0\x00', r5, 0x20, 0x40, 0x7, 0x8, {{0x32, 0x4, 0x1, 0x27, 0xc8, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0xf, 0x24, [@empty, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x14, 0xde, 0x3, 0xe, [{@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}, @timestamp={0x44, 0x8, 0x24, 0x0, 0x5, [0x2]}, @rr={0x7, 0x27, 0x4b, [@private=0xa010100, @broadcast, @loopback, @private=0xa010102, @private=0xa010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote]}, @timestamp_prespec={0x44, 0x14, 0x37, 0x3, 0x6, [{@rand_addr=0x64010101}, {@private=0xa010101, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0x4, [{@remote, 0x6}, {@broadcast, 0x81bc}, {@remote, 0x7}]}, @timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x9}]}, @timestamp={0x44, 0x14, 0x60, 0x0, 0x0, [0x9, 0x10001, 0x2, 0x6]}, @end, @timestamp={0x44, 0x10, 0x3d, 0x0, 0xb, [0x10001, 0x80000001, 0x8]}]}}}}}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x33, 0x47}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x800) 17:22:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x17, 0x0, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x20}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x120, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x78}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket(0x1f, 0x800, 0x2f73) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000740)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = accept4(r5, 0x0, &(0x7f0000000900), 0x80800) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r0) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r9 = io_uring_setup(0x5b95, &(0x7f0000000ac0)={0x0, 0x2db5, 0x0, 0x3, 0x3b3, 0x0, r5}) ioctl$BTRFS_IOC_RM_DEV_V2(r9, 0x5000943a, &(0x7f0000000bc0)={{r7}, 0x0, 0x4, @inherit={0x58, &(0x7f0000000b40)={0x0, 0x2, 0x6, 0x7, {0x8, 0x7, 0x5, 0x7fffffff, 0x7}, [0x81, 0x4]}}, @devid}) 17:22:01 executing program 4: sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfe}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40810) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x34}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xff}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x91b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xbb}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44800}, 0x40) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8000000, 0x2]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ab}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x38bd}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001680)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ifreq(r2, 0x8915, &(0x7f00000016c0)={'bridge_slave_0\x00', @ifru_names}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x40008001) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r3, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3d}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c4}, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001940)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r2) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6b7e}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x686}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8008) r6 = accept4(r4, 0x0, &(0x7f0000001ac0), 0x80000) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, 0x0, 0xc17, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfffffcd0, 0x41}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10005) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x48, r5, 0xb02, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r2) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000001d80)={'veth1_macvtap\x00', @ifru_map}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x70, r7, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1450}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x17, {0x3, 0x65b2, 0xf6f}}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40004) 17:22:01 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80, 0x80000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000240)=""/4096) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001840)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f0000001280)={0x580, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x423, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0x6, 0x9}}, @ver_80211n={0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x284, 0x1d, @random=0x4, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x0, 0x0, {0x26, 0x5, 0x0, 0x7, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x8, 0x9}}, [{0xdd, 0xc4, "feb45fae2750d192d87824ffaa657268c2226c422e028ea2ccf34183933a7da0e79b07702cde0dc3c8c45e3d07269bfa1498207e2c2a9202d2562151bfce1a504101e1f417777285565821255804a000a4feaeabf5ffcc7209b090cdce98a97a1a4fca1666e761425cb2d39a7981b4b4ab08731217d0ff617f16532ffde4ebcb401b0f1c9c0b953cc49123c2ad813126f2282e1f2dfd202875ee5af25d6ad695b3f957054cdd4220eb467488f8804a8121a25472b1e5f6b2d19f49304ffb9dd886d1ec17"}, {0xdd, 0x24, "6a40426e2783cf7a9c7c36ebd7bd1d1d3da553fe8065c549b07f8edd36f431b0be4b6c83"}, {0xdd, 0x7a, "9da5029a23131336b2ba8ff9665856887b49b61012fc9ace5b8a66775d41baf615daa6da173f59e0bf86a645bb59a9b23f24bcfa5efa24da3a7ccd93dfe7063b23b674113ca6c53b7d0a3a5a1e2056c5d3fad1fe91463eb5a35ec69c9c084dfd1c262bcf78754484d2e254514acd914006890baae20f3c075ee8"}, {0xdd, 0x77, "bd17a565574bf647537cfd7cbf87d472c18964f796c98edc361fd1e0fd8cc860c23f4d7c683024c9b687f854f05f42cd420b6ea75e90a9ae937d6abd6f41ca91ac1052203d2632a49221d5d725de1d3f62fd864ad3afd9c0f25582ffb42570c4d26015c9d80ebfb019512d6273e0474e5e7ad61b93f554"}, {0xdd, 0x5a, "326aac447ecdc3d0c5427a52361a342ea2794028dde09f39ebc2268163b0a2a797232c61cf8c6e10fd88502144a15b9a17824b35e78ec2eb76e87ca5e50213ff5d89ecc13613d426caaef9000379fe5c82b5b3b940317d8b0cb8"}, {0xdd, 0xfc, "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"}, {0xdd, 0xa4, "de3a6d2f0d4100203cb0c95728b1bbc5efa7b9409230e3e08c863741876e11512c2d70daed61656d383ffe7df6fdd1f5f1cad781859bbdf116d2fba7722865c2097111eb4d4877bebb6510c81b4bb95e30fa2bafaf94fa9fa307693fbc1e2f09c02f4bbe0510994ff1b7681cad80c98de3875d6600dbd2fc934ef9674c347af63f4f91abf133194e1a8faf04ab121831d444c608f6439e084a74401ddb480484b85a0ba9"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x812}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x12f, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_a, @from_mac=@broadcast, {0xa, 0x1}}, @ver_80211n={0x0, 0x8, 0x3, 0x1, 0x0, 0x3, 0x1}}, 0x0, @default, 0x1, @void, @val={0x1, 0x6, [{0x12}, {0xb, 0x1}, {0x1b, 0x1}, {0x2}, {0x5, 0x1}, {0xc}]}, @void, @val={0x4, 0x6, {0x2, 0xf7, 0x7, 0x8}}, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x1, 0xe, 0x7f}}, @void, @val={0x3c, 0x4, {0x0, 0x1c, 0x8, 0x3}}, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0x8, 0x80, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0x800, 0xffffff7f, 0x4}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xbe, "603340a8618b81c9051de9065335add33d7903ab1f4c9489bef06715d8e234e6bbb62b2d0e0b794e7a657d1e38b12e99d25c77a00925dad30dd40543d9fc6e22fd1709f4d819ed9b598b3db34965430bd9f99eb0e4bc3f0a1fc83b5b0e8d9087ca253473b736e6cf3ab11daa7d85674084f406a4aa37dbd5a1213d68b9901ace3b0c07f6bd7b6dd2e87747aeb79e9afcac4d658d50a7af84226723d791f68d8819be4c1fe304d30e3a9d4c1d4930f42576d8ea63f53bafa5cbdacafd696f"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x580}, 0x1, 0x0, 0x0, 0x48000}, 0x8010) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000001880)) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000018c0)={{r0}, 0x0, 0x0, @unused=[0xbc6, 0x8001, 0xfffffffffffffffd, 0x5], @name="4d4825e6646961e56b37d80f65c56c5328c3ad2b41693d757220e31f3c0458ec2491c8a0b500121bfb74b4fe450e71748e9b03a63867c63fbaa0d21fbca0400cbf1dbb143a98caf0a7cbc65d03532a6c2aa43ee4f73a8a8e846f047eaad2b0afe7bea031bc61510ee996190dbae0283e7f2219536eaa69015a8298450ee02c649be44244ec68728d0240ee55d804e91b6f631f01055c002cd0b652e9180f456b2ea237160e86604edf14f23189dbb0a683ca03ef86f0e9a65259704065fcbd9fec5bc79f129f15bc0ad004dfff3cbcbaae39116e55af4214cd8c85fa1782b070e16c3c1bc970efd745acf57ffa0e587fbc67c08634db3354ce528d2f88f4e8ec77417e26de19a4d48d76ad577186867c5baf93f120125c810ab3d6dc6d29e88d9ef9bc3aec1b3ca3437e2f2e5c47c6585c651d59dcff8a828f6d976bdf982ce0c9c71be6bad3c7fa7f62015da086a65df5c670f0c10dd544f353eb12f28c111bd33f7c2118def640bab27d0ff8f94d152c06f7525f5634ae86899f3ee78dedfc43c2fc16c290a8800a4e5ab233aa3ab8a14f2da788f7416b2bb324aa94e224b157cb72ac928d272660446e89cfe749f788d920bc7d4f0b545583bf2a0c5f7dd2e4ec839409542cf5ad4916ecad37e435e69a12663a0f4c63229820ac8e835f24dd85ca07fcdec80161ec708acd25bd4ebdffb56c0fefe6c8c1a9a1302ea0da324ab9d12f29c3df888a341686566db8c35704c5833f62c4940cab532c18409c2c153279fa6bd98bdd83b658dbe0a6c0084137c51c15e36e0549601ce86acc6bd5715b56ae952b6246c747a5c319038a52999240b8a41773ace61a160b8d75c2f4a61bacd55a23f3417bcc6250d85fdf39de816bbe8a555368609dd2ba1451e571a7f5a6ac5271722f233a88e54d58027b984768357d89cf6220dc6d175373b6f9d55d63684052e7e937f11128fdbf4f4e5695af6ae71c1bab9665c3185b809631b6280adc1ecf5df4ea6e91790a359dfcf4fe40f13f72568678468f25ccda9b801929dfffceac9c4ea410edf9b0779fcf88fc86d063fc0a99b7b4d5889a1390ebf0f415c4f26f3dc6ddb4db2b0cde475efd4da95720136a32e2fa757b83140ca51f1fa4d822551fcf64108a5269d5fa4a6626a1cea9aeee586a08b1705e9117a1757d538f8d04bab4b23ee016f7c24c273d31e28a8ac880319855772eb802f0029318b81ed148eb00229471889213f11da3390ccce7b7a4fdf451a8d07ac1ec7d339bbc57dac7f997e78fcb2e01dba942d7c44e83acddf4019dbaa6677d7939cb43b32e230845844fc5223a0e9efad1acc0464e25761696db3c220403b40fda238ed3b7c749de5cd65d1475bc12a896c337ad7a6a33527ee37e8aad7807f832e1bef1150282e7f361d4d3f9c2cf06923dd047d168f60f18c701c8bb82dcd429f69afaa9195d8b236ade253da56fe40a18c410b19314fdc4924a9cdee88a89b02c4a80e2b2ac4c08187cf9e622b26849f3403185dee76fb8426785bc19d6c9f9d8d0312d9dac72af4f45da937f961bdfd4a12be9627e73cd7c5e546e0eb7d1f596e10e610c4e6a510a66afdccd9b71c54706599bf88196ddf7ac75c18ac92f4006501d3378a6739427b44d2d89773ac92db5f9b8d13b49cc42f8037836fb6cb01a9e2d73e3af0f23bb49437ebf6b08ccd35e836bd23a7bf16a69dc2dc88460ee78c76c1ba848695712a79f73dd639449b9a5f992411d9d46bd732fce8a0df81a3db9de59cddba582a11e0670fad10974ca292726928c524a133d42ea4c368500679a33b012bbdef94fb913f1b9412b237f8c496591357936b9d0a13e98260615c041cfedd06372f2af01db16e91d2885a52a8b72212402d3815e0b1eb3fc4ee8631d2030548b83bd5c53547e6d91759881d55702919ab70b66031b622d922607d0c9b7f0dcd2bb3aaa30397f7aedfe2ff2e38a66811fb99d3304db2a5fe2a716e467ab31bd4da065420837c82a5fc37aa72df1ebdd2694cbff3065bd8b1a8edc3fab088845d6f6fd7f81d81a70f84794ee4c81b8feac2f41bc11c07136c15b0a5feb16a23d1b267c14ffda65bfdc767d91b1d339035fed664c63506fed9f4f127d5461516c0817342e4d3f5ed065b63af102086106aacfa7205cc46eed740ad5b77d574a2fd810a11036785189470831c0aee859262851b93671be16a6c81b4fb1524310af6f924f94ce455d5041bcca4d6dbc392123e1567039ae541de2500a44973f8ef5091763a75457cdedba8e8bb8abee882764a34bbf250ed65a42ba6c337c7e70601cbd21e98c41c0d2119d3fcce17b4b04da964e85460e220a039e2b7a73c63d12ce28d1192debfeddc72c9b5716ec89182d06e2ccc8c5509ef4589b4ad95b8e984fd6e411d9c3e553a6fa627d6a956b06b9a3725cd3efe7d141eedd76fcae8d0768fd39a76bed8e0ca787a311b9860f23d3f91e2989c0642eee1d7ccdaee54cdf76f4141b9991dae727687dc7760c338cb5d5592c31c6755a3c15d1d81f76ec1016ce8bf063da84d9f540de333be92a85abc97b0aec6341d5e93580f82dc991a1907f6360d5e59c7a3a12d5f4aae5852e4cb64fc3c49ccf6a485bf9832cc78a15c7a6827577a9a92526561a336bbdd21a47542ba1ea3fa40372baf626ec5c0043055df204d317c71886653af87ce10fa5d95377f18bcadae6d9275d819bce4bae76cd4550605cf83f3389445505e6e76215a1a930244b9efa2caf8fb8774741159beb6335214633e2148cd970a1dbec28505b3de82c3cf1777aadca2b355a723ec2f34da296536ad5d071e1c100632facc005313e82964d70b4bd6c0abcea445cc4393b276051ebc4f168c4aabf9ac2727442f44581571df57503a829d0fe520982b355da054c366ea1d1041e5ad8749840578a9db1d510453400a0c94add2745ac28dd7ae552231d4b67c731cc66cdf18ff7ccc7b145d23bc94d8f2956fb518e4581e49d03236d3421834dfb8b8ece35e46ec6de3ae5971d30fb0e988bb6edaa2ae864611a3cc8eb0ca47ba40f45832995be9364c3e9bd9034d5168d3c8d907f3729e74537e81a1ba3a375cb3dd4f06e8fcd3d7ffeb479da903dcedb9594dbf07a7949fe88f1395889b8683ba7ff6fa5b9e6ab8844f8a1759d80c056ef113b08e67145c92aed0f0215ba7aaba6805e4cd5117894b0b85d6e74fbec55873d76fed5911e5e298174149c501583f746027162a60603ecb0f0df1c8db39d054d3312485953ce0866abc3efd88112be3c050bacf40f28caed1d785d7f4700cce7dfdd9579fef68b3fe2b8cdd811594f5901fb3fca51673a4a80123ac8357616184644e6a31266598b2cfaa447150536898806649fad1663797daa4af35c6d71779ee403705f2ab9bebe8d5e0e2f4982b53c9874a5f251c55b12b1218c9da96ea1e713a9f91f694a5f63f7a209cac172c1bbdd3587edace2065363769c27a193c8eab7151242b529a8daa030aa713a9968ae2244a51a333d2cf5ac1380de5597a8427402abeb7e9f0b1027dbd7783c37ffb6155c5e63d09304d3e82a733c157af22fd51a1b61d9f0a9f890f7b851f13b6f9f8b9f7fc142a9c87ba0c42c088cca385b9d5cc6dc274a1f93046cf6fd5478f176836d8542800afade2671ba04b76c307bc8fffa96a67b34c2eee93e414864fc94a0e2c7b7818cd8af967639e2ce4493b6c5347af1b1b9250e727bfe73f411d98bba86dae993bd7680a2fe4c70e50488930ab9b97ab3629ae81e7b4e11b645e610df3b8d0e10ffca04f38effd77927aafbe8c15220d8a3e9785d19e8be69103b92760a75c1d0af1d9a2d44313221bdc34f015e1924f0cf503a75e7c498b32f61fdce25dbf17c9ac1c60a9c3f43fcf08712d90ba9073570051801508f25ee9b1ad1d8339510ae675d9c44fdf164b5cac87eee3e43a49bb9ae1f768c9f3e7aea6b61bea2579b608e6a8388cdc594e78617601a04e87d4934e22105582c67af8b39dd1484074f2120eb9530842c4cec65b4fa5df5b24f6c6d19fcf3e0ec66aa37cb7d50d9778e475ed8a236ead594c986dafa69310125e10200ec4be68bbcd9144605196c3a7ede62aa052aff2e9c784145ebd414daa8f2f9693a707a805e2f220a9340ffc9e144a08012459ec24fde9e25c3a6583984994fe182d1cba05927d228a53ab312b95a2223fcb2264e5fd5825680791a1ddb1a5cdc173f75593769aa45cab3a00c2f876a4cfa856943310a2bce45003f8506aa3a594e2519cb88c5b22d1f877efefacd9082b7398eed38948f832d7ad152ff5a0ecb543e4ec8b3d77685a6b3752cf087a10c119613b440d142d42276d1e50cc508680bb4333fff2e4f343aa5bf1f1cba762a8e35853782ff57ceaedfc06f85ef2c31137007fd6984eb1cc956bb5983e270410227661c01e19d66a0976c3b517ff057699aef3cc7cf38266599e8f344cfaa7ea1b078ef17871270e461df4962c9fef5ae7121fc83156ab8c8585a565ab3ecd88fac2a7e37cb5f9dd2923a966f5c79626efb84df0bb3da32c5a66d10bb1072fe78f80bae6e9dbb88eddab5a5c47380309577b1994270ae0d11065304b19990dd7e168be63f3cf13e50846d1abf9222526b75d37bfa77f03bad808e4d9505743f4cdd24f144af6fae16e0d99ed69db708dfd0224c5748d022fa38f09223ae78a9f9997081e9709bc68604cc9a1dbfd7dc82f85aab6770333fa34852c261a786ce73a7f3763cf0b5620d454ec7548cc08f2bdfc4aa251d1929a6e175d11eed4cc87611626cb2334d6a0a089a5ff43c908fb88fc6a596ec4cfe2543ef079bdfea74df376084234de698406a82653d79b2cb83f9dddf9ea3c1ef8568692e6a83b59326339e6de9e8ca6415be0ba9c2c7cce9cb709891296f96ddeeac0ac9dece351c9959d118a9918dd49bf7a892f2be115e4a5f83c78883e4c0a15a153483271d855b95a64e1284b599e125e1fbf6ab02cb4df997e9156246857e4f4e4e5f601234980a382259989cb3e106ba12e7e4e7f610187d7e1817d715e8c9f393f9f8c1b3bb061f8121d99e509b1456ccac7f8a8fe86ff3a7ea94b5657a2611fc22870cd161eb3c8cb5923f783fe3cd586d9c00d5f38c727c3cee1ed5e98c444895e40e78c9b9cdfc3eb4a147a37834742c2cb9a107c4d9154329b8f31d80348ae79649a226cb430777d9c06f74f728fccda348f528137660b27282203e00899e20b4a34000093160def6716fcf46d8ef1d97b4c8042d3007f2d50593bbd1188f8b3208cf10328d9a72c6d537755be75b48cf259fb6889599e8e1b7f36e84eaec629c3cb30fc34e9b4e9af4c92281a378fd811dcbf77c9229647c3d7ef23b7b3baee28392777877ceb475001918b9e5bdabd8c381301cea43d633ca615a4f17762359e360ef1bc6eb1cd4a0c5ef9e6eb8067929572b6da062f2cfe7b056ee1807653d5d08a6735533e3dcd205eae741d18e44da784735663703a6cdecf9ce31635ee2db4db2187eb72bac9c34b6c22b1ae64cedee49ec0624450ed69b80940a5722a4d5b33a7745c386def03ff8ea1a524abe73cc9b8077aa78aa1864b7c7b98aa35372bb9c1c8ab25068d48f668cc7de2ae143cf20c5b4567ef81f18504417f6dc695f2ad9669ae33a3f3f0f9c56300dcc1bc2c15ed7d72486bfc5fb7a6463823b324305d6170db8e6cf7af75df0ea286514"}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x814) socketpair(0x3, 0x5, 0xe11e, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000002b80)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002a80)={0xc0, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x300}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x378}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200000, {0x3, 0x80, 0x6, 0x6}}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3db}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x117}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x80}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xc0}}, 0x80) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000002d80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c00)={0x108, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9736}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfff6}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc8, 0xbe, "c0579bdcdce8f84945de337602bdfd322b47aa232bd616e25869034c56f915abe601ac2e0484993fc489a3ffc727fff85645bfc5b9ec1fd8752e7d34cc7904c9d09ed801583604d954800b13d81b91275ef35462598b33cdaab359b3303c2d0ffd2cad2fbafdd6b756c3f22881edef84b566d46c54580f3195b694fc4c4273ddfc4372d17882893fef8debfb0d4e1176625ae88e7715bd85fd902d1b4a5d3285089c8cfe82c36f51fcaac5ff9992fb015bb6e0155f382b5a653beb7b8ab300b1e9b6f65e"}]}, 0x108}, 0x1, 0x0, 0x0, 0x40008010}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e00)={0xc8, r4, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x74, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="3fecb9c85a55581c23ee416bc808fdea21cb4eeeb72fd46c066f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1c000000}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="df485dae78fb"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2b19}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x89}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}}, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000003240)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003200)={&(0x7f0000003000)={0x1d8, r5, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f77f30bb4110a468b1523df6b840880395b13a936c549fdc"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5dc6d6c7391ae924f074f77321a7791ff53234051c38864a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7cee6e1feb07bc9b67a9cde6c40b2aad750d245fa87ce0e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "46c9f71076c8ce2bdd721697448a1ebb61d8a59459961f39"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "62bf45f09393ab2ead11a37bf612ca9f3a729337f48ba784"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e6be22d2a4fb475f4d3da98798b064495083a909ecd3fc8e"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x200000d1}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x1c, r4, 0xe00, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0xd0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000003380)={{0x1, 0x1, 0x18, r2, {0xf}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x20000010) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003540)={0x7a4, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x110b, 0xc}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x2c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x7f, 0x3, "fda88de2f0ee3fdb5f1ffed4fe76a6168170114907b9d4de7f742a4e0a22630f3516fca9a2a262e933999a501c716ad73deab9936af537f7808dee1a4ae45220631d4bf026548e04d698f52b3052a072acb7d4718763dfc413da7b7b593c33bec308f2056381968b1ec1c62b00fe8481ccc58e905f209b1892b8f4"}, @NL80211_FTM_RESP_ATTR_LCI={0x35, 0x2, "7d78d5a55e00b6bb1ae2397925275ff7fa655d68af40fb4947f1a4d09715c16aed1c5e0ba17182cc1a961f650c2356f74b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x23, 0x3, "805224d5825fb93fd1e4799cd271b3d754569ef24693051e8c60785d543385"}, @NL80211_FTM_RESP_ATTR_LCI={0x54, 0x2, "bfe7971399ae39ccba4e8a3776ba4a46922007dca5aaeae5cb0f8e67822a457fdc055980ded1f3363c9950329c2b00aebfd6f9cd378fd5e2e4379b358175b21fda4675f471523ee9701be850cdffcddf"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x83, 0x3, "abe561158d4e589ddd801bd408d0be17e0630e35b519bf28abe58358ae1c2f73f056082b5fdb9c651e6247ddfd0c72aebc6637b0ffb81669df2b44a4ceabd411de0c0885795888fc3ae55c73b8c0c3511886a4f651b6dabddebb9783f9d21ca5bf5bfcefd0b4d6d46c0bc0f46c1dd13d3e1e716142d2304796b8552ace6a64"}, @NL80211_FTM_RESP_ATTR_LCI={0xf1, 0x2, "586387e97538c646699197e211e1daaedd7c0cabd010bcc2a595b28fb6ca09fb14938764cc67e178ec3964de4eccd3c3f8d89d61af1a6aa09db51bcd861377791b9aede92b634a5b9bbda00c896238cc1bb76e9f1601633cb235eeaf7a07da0925c9c017b2fe19696e8d14653924bdb3499bf12ba7d49cc8b2b089b251602de6e75df9b5053699eec2cc8ba9651c9d54ba69278290467a0e71443a2b86e0fbd1b29b2171ceb4fe5657a91263de96e48a7ed9706395085d5e6d1ebbb6753b152f73e26473028f54dae5a87db4806ef2b813f2d918ab4f33b1a37957bb0dbd9b77dea5f508c30eb7e7171e0dcb13"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "04"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x2b6, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0xed, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0x3, 0x4, 0x39, 0x613}}, @cf={0x4, 0x6, {0x6, 0xfc, 0x8, 0x5cf}}, @tim={0x5, 0x8d, {0x1, 0x94, 0x8, "fffbfe1f36032cd2d4bc41636f3aeafccbd7bc75afb508797fe48134d78934ac9f04bba3b352e0567043dcdaf7841c1c7d114c69e261d9eda7e3a618b88ff4745deb807b842efb3005bea9013abf2d35325583967485b163f07416d1dac8dc97d254df187e220834383e66ab86dddcbea5ff2c9dd3078f30574ee2cb6424f7d6b4b6dffd7e86c6418a28"}}, @prep={0x83, 0x25, @ext={{}, 0x3a, 0x7, @device_a, 0x80, @device_b, 0x48000, 0x1, @device_a, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xb1, 0x20}}, @mic={0x8c, 0x18, {0x285, "cf06c87e3f52", @long="20169a60f1dbf083bf5c18c567f5b61d"}}]}, @NL80211_ATTR_IE={0x112, 0x2a, [@measure_req={0x26, 0x57, {0x8, 0x8, 0x6, "ca93d956fe3295902922ebaff83cf8f2d259afa047b7383bcca887d1dc75c849de1bff254a6a7b022d133e760c38af4ed0c4eb7a127323663c9701a9773d7ba513e66428f72c04a876ff3e005bc5a8430008f387"}}, @measure_req={0x26, 0x96, {0x0, 0x8, 0x5, "01dea87b87072335e16e4638141a7cfe12f29cfc93819b40b9016a709eeb32b153174b030b776d86957b5602056a5848cb66ceaed329b621261773ea9f4e5eefffcc1de1afa88981d1d7cc71232fcb22065e99841b9fe0fa086ad3116b8b5a9c9e9f1a7cdbef40e83d08b653bbe8fad2faf1e3c8332c4837c158f3b7da92db5147011c483ddb8a3d81e91de3d18aae9f6a275e"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x8, 0xb1}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x9, 0x0, @device_a, 0x3, 0x5, 0x5}}]}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:22:01 executing program 6: sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x17}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004001}, 0x2040040) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x53e3, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008800}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x140, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x70, 0x57}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x37, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x4b}, 0xfb, 0x5, @device_a, 0xffffffb2, 0x9, 0xfc}}, @dsss={0x3, 0x1, 0xab}, @supported_rates={0x1, 0x2, [{0x4, 0x1}, {0x18, 0x1}]}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @challenge={0x10, 0x1, 0x57}, @supported_rates={0x1, 0x7, [{0x18}, {0x4}, {0xb}, {0xb}, {0x36, 0x1}, {0x4}, {0x2}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0xbf, 0x7}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe7, 0x7f, [@ht={0x2d, 0x1a, {0x1, 0x0, 0x1, 0x0, {0x4, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x3, 0xe1}}, @tim={0x5, 0xc5, {0x2, 0x6a, 0xff, "a13c0c66c9a69ab79b75c27a8f7981d4bba7d5bc39b05716cd15a6c4a54fe578e26cf7425abaab3a3bf08b87d2974536ffeee9977d2ee8a0db215d69005b525a822eca5927a4524c7cdd5ceb91667c7f6271a24c53f7dd55c9f53127dea74acb4552e94b34e7b6a60cdc5be532b41233b6f69ab1cfaa7657496fe45b396e900294409d9e8903ad5a235a1845c589590a6a0ba791c44aac5050aecf464a55d2f8a5856b71d9ed603bb737d40e8fb16f103f6280633b33f16b8c2a67bab3e9c593efe1"}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4001}, 0x20008000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x40}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffc}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40080}, 0x24040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r4, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x8004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000b40)={'erspan0\x00', 0x0, 0x700, 0x8000, 0x10000, 0x2, {{0x32, 0x4, 0x0, 0x5, 0xc8, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x2e, 0x0, 0x1, [0x1f]}, @rr={0x7, 0x7, 0x80, [@loopback]}, @timestamp={0x44, 0x1c, 0x86, 0x0, 0x0, [0x1000, 0x2, 0x7ff, 0x101, 0x0, 0x7]}, @timestamp_prespec={0x44, 0x2c, 0x48, 0x3, 0x2, [{@multicast2, 0xfffffbff}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x400}, {@private=0xa010101, 0x2}, {@multicast2, 0x1f}, {@broadcast, 0x100}]}, @timestamp_prespec={0x44, 0x2c, 0x62, 0x3, 0x9, [{@multicast1, 0x1}, {@multicast1}, {@loopback, 0xfff}, {@loopback, 0xfffff6e1}, {@multicast1, 0x6}]}, @timestamp_prespec={0x44, 0x2c, 0x7, 0x3, 0x5, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@remote, 0x1}, {@remote, 0x2}, {@multicast2, 0x5}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x88, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x48084) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET_EXTENDED(r11, 0xc4c03d09, &(0x7f0000000e00)={0xd}) 17:22:01 executing program 7: mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x20010, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x5b5, &(0x7f0000000000)={0x0, 0xee15, 0x1, 0x2, 0x124}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "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", "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"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socketpair(0xb, 0x2, 0x4, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ifreq(r1, 0x8946, &(0x7f0000001300)={'veth1_virt_wifi\x00', @ifru_mtu}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x7e}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x3f}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x1f}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000014c0), 0x40000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001500)={"19f0d945c69a0b33a8827fee7ce103c3", 0x0, 0x0, {0x101, 0x8}, {0x7, 0x3}, 0x5f, [0x24867e1c, 0x8, 0x800000000, 0x5, 0x244, 0x4b0, 0x9b, 0x0, 0x1f, 0x0, 0x10001, 0xa07, 0x0, 0x8, 0x6, 0x8]}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000001600)=r7) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001680), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0x90, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x41) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x54, r5, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe4, 0x5}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x80000001, 0x7f}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 92.653020] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.658036] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.662288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.668133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.673538] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.675893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.710939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.714304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.717017] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.722838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.725604] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.727527] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.768333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.776523] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.779668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.781675] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.786828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.792758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.797378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.803362] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.805091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.806277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.811915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.814040] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.820776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.822498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.836636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.836996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.839563] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.840963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.853146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.870222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.905656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.937005] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.939881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.948951] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.954110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.959407] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.967411] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.021367] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.024717] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.028222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.030411] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.032069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.050589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.076650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.079177] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.082922] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.740845] Bluetooth: hci0: command tx timeout [ 94.805599] Bluetooth: hci1: command tx timeout [ 94.934928] Bluetooth: hci4: command tx timeout [ 94.935378] Bluetooth: hci3: command tx timeout [ 94.935739] Bluetooth: hci2: command tx timeout [ 95.060619] Bluetooth: hci5: command tx timeout [ 95.124669] Bluetooth: hci7: command tx timeout [ 95.125064] Bluetooth: hci6: command tx timeout [ 96.788530] Bluetooth: hci0: command tx timeout [ 96.852579] Bluetooth: hci1: command tx timeout [ 96.980576] Bluetooth: hci4: command tx timeout [ 96.980669] Bluetooth: hci2: command tx timeout [ 96.980719] Bluetooth: hci3: command tx timeout [ 97.109508] Bluetooth: hci5: command tx timeout [ 97.173127] Bluetooth: hci6: command tx timeout [ 97.173239] Bluetooth: hci7: command tx timeout [ 98.838499] Bluetooth: hci0: command tx timeout [ 98.900633] Bluetooth: hci1: command tx timeout [ 99.028560] Bluetooth: hci3: command tx timeout [ 99.028659] Bluetooth: hci2: command tx timeout [ 99.028749] Bluetooth: hci4: command tx timeout [ 99.156737] Bluetooth: hci5: command tx timeout [ 99.220674] Bluetooth: hci7: command tx timeout [ 99.221070] Bluetooth: hci6: command tx timeout [ 100.885769] Bluetooth: hci0: command tx timeout [ 100.948517] Bluetooth: hci1: command tx timeout [ 101.076551] Bluetooth: hci4: command tx timeout [ 101.076636] Bluetooth: hci2: command tx timeout [ 101.076721] Bluetooth: hci3: command tx timeout [ 101.204580] Bluetooth: hci5: command tx timeout [ 101.268529] Bluetooth: hci7: command tx timeout [ 101.268614] Bluetooth: hci6: command tx timeout [ 155.185059] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.187624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.191620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.193741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.197861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.199687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.211389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.215629] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.215999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.227708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.228056] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.235333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.265123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.274933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.275792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.295685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.297830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.304706] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.305114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.305477] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.310194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.311351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.318076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.325006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.337126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.337692] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.341986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.352258] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.357014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.357615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.360234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.363880] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.365671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.367175] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.369913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.371338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.372976] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.381934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.383929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.385670] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.388317] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.391142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.398796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.420762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.428749] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.431170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.432704] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.437801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.332990] Bluetooth: hci0: command tx timeout [ 157.333382] Bluetooth: hci1: command tx timeout [ 157.398913] Bluetooth: hci2: command tx timeout [ 157.525623] Bluetooth: hci5: command tx timeout [ 157.526521] Bluetooth: hci3: command tx timeout [ 157.526691] Bluetooth: hci4: command tx timeout [ 157.526843] Bluetooth: hci6: command tx timeout [ 157.526995] Bluetooth: hci7: command tx timeout [ 159.381556] Bluetooth: hci1: command tx timeout [ 159.382145] Bluetooth: hci0: command tx timeout [ 159.445520] Bluetooth: hci2: command tx timeout [ 159.574221] Bluetooth: hci5: command tx timeout [ 159.575095] Bluetooth: hci7: command tx timeout [ 159.575169] Bluetooth: hci6: command tx timeout [ 159.575232] Bluetooth: hci4: command tx timeout [ 159.575294] Bluetooth: hci3: command tx timeout [ 161.428538] Bluetooth: hci1: command tx timeout [ 161.429130] Bluetooth: hci0: command tx timeout [ 161.492528] Bluetooth: hci2: command tx timeout [ 161.622474] Bluetooth: hci5: command tx timeout [ 161.622589] Bluetooth: hci3: command tx timeout [ 161.622690] Bluetooth: hci4: command tx timeout [ 161.622765] Bluetooth: hci6: command tx timeout [ 161.622840] Bluetooth: hci7: command tx timeout [ 163.477611] Bluetooth: hci1: command tx timeout [ 163.478274] Bluetooth: hci0: command tx timeout [ 163.542641] Bluetooth: hci2: command tx timeout [ 163.669567] Bluetooth: hci7: command tx timeout [ 163.670141] Bluetooth: hci6: command tx timeout [ 163.670237] Bluetooth: hci4: command tx timeout [ 163.670301] Bluetooth: hci3: command tx timeout [ 163.670362] Bluetooth: hci5: command tx timeout [ 217.251771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.257327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.258162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.273233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.275876] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.276568] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.382059] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.384112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.388010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.394788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.397159] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.399063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.434592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.438742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.440856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.450708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.456192] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.458516] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.515779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.525021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.525294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.532781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.536733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.539624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.556212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.559693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.561843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.569043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.579100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.583532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.583981] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.587740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.612525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.653204] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.656722] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.659441] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.660842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.677653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.689123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.692880] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.696268] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.696832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.697017] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.729561] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.733817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.755728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.772319] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.773594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.348553] Bluetooth: hci0: command tx timeout [ 219.476724] Bluetooth: hci1: command tx timeout [ 219.540542] Bluetooth: hci2: command tx timeout [ 219.604609] Bluetooth: hci3: command tx timeout [ 219.668556] Bluetooth: hci4: command tx timeout [ 219.734488] Bluetooth: hci5: command tx timeout [ 219.798502] Bluetooth: hci7: command tx timeout [ 219.860595] Bluetooth: hci6: command tx timeout [ 221.397518] Bluetooth: hci0: command tx timeout [ 221.526365] Bluetooth: hci1: command tx timeout [ 221.588485] Bluetooth: hci2: command tx timeout [ 221.653952] Bluetooth: hci3: command tx timeout [ 221.717559] Bluetooth: hci4: command tx timeout [ 221.783511] Bluetooth: hci5: command tx timeout [ 221.845930] Bluetooth: hci7: command tx timeout [ 221.909498] Bluetooth: hci6: command tx timeout [ 223.444996] Bluetooth: hci0: command tx timeout [ 223.573594] Bluetooth: hci1: command tx timeout [ 223.636495] Bluetooth: hci2: command tx timeout [ 223.700598] Bluetooth: hci3: command tx timeout [ 223.767468] Bluetooth: hci4: command tx timeout [ 223.829591] Bluetooth: hci5: command tx timeout [ 223.893735] Bluetooth: hci7: command tx timeout [ 223.957504] Bluetooth: hci6: command tx timeout [ 225.492992] Bluetooth: hci0: command tx timeout [ 225.623633] Bluetooth: hci1: command tx timeout [ 225.686489] Bluetooth: hci2: command tx timeout [ 225.749502] Bluetooth: hci3: command tx timeout [ 225.813544] Bluetooth: hci4: command tx timeout [ 225.877510] Bluetooth: hci5: command tx timeout [ 225.940511] Bluetooth: hci7: command tx timeout [ 226.005220] Bluetooth: hci6: command tx timeout [ 278.183094] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 279.655260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.661282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.663294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.672955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.680097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.687076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.796012] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.813233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.814920] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.833594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.840025] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.842557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.876691] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.885958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.887877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.893616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.904824] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.907936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.974046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.978215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.984924] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.991567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.005922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.011351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.015938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.020667] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.029960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.038673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.070169] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.072794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.095329] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.106343] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.108588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.110349] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.120798] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.129840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.181662] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.198829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.200130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.214869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.239249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.242875] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.255944] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.256385] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.256916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.263299] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.282865] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.290874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.748529] Bluetooth: hci0: command tx timeout [ 281.876489] Bluetooth: hci1: command tx timeout [ 282.004473] Bluetooth: hci2: command tx timeout [ 282.132521] Bluetooth: hci4: command tx timeout [ 282.132585] Bluetooth: hci3: command tx timeout [ 282.388706] Bluetooth: hci5: command tx timeout [ 282.389463] Bluetooth: hci7: command tx timeout [ 282.518455] Bluetooth: hci6: command tx timeout [ 283.798472] Bluetooth: hci0: command tx timeout [ 283.924891] Bluetooth: hci1: command tx timeout [ 284.054489] Bluetooth: hci2: command tx timeout [ 284.180590] Bluetooth: hci4: command tx timeout [ 284.181660] Bluetooth: hci3: command tx timeout [ 284.436612] Bluetooth: hci5: command tx timeout [ 284.436791] Bluetooth: hci7: command tx timeout [ 284.564486] Bluetooth: hci6: command tx timeout [ 285.847452] Bluetooth: hci0: command tx timeout [ 285.974624] Bluetooth: hci1: command tx timeout [ 286.105800] Bluetooth: hci2: command tx timeout [ 286.228900] Bluetooth: hci3: command tx timeout [ 286.229467] Bluetooth: hci4: command tx timeout [ 286.484564] Bluetooth: hci7: command tx timeout [ 286.484588] Bluetooth: hci5: command tx timeout [ 286.613502] Bluetooth: hci6: command tx timeout [ 287.892542] Bluetooth: hci0: command tx timeout [ 288.020670] Bluetooth: hci1: command tx timeout [ 288.148691] Bluetooth: hci2: command tx timeout [ 288.276562] Bluetooth: hci4: command tx timeout [ 288.276710] Bluetooth: hci3: command tx timeout [ 288.532588] Bluetooth: hci5: command tx timeout [ 288.533614] Bluetooth: hci7: command tx timeout [ 288.660512] Bluetooth: hci6: command tx timeout [ 342.309881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.313757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.317831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.324671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.330142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.332868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.368627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.371238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.373667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.383345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.386341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.389474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.513557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.517184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.520786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.533757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.541762] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.550298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.708775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.714361] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.718906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.721927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.729003] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.733129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.735899] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.738206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.764953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.770893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.774143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.795174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.803267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.816644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.816689] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.817008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.830687] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.831141] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.836653] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.845906] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.854791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.855950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.887241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.893150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.907849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.927818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.929956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.945206] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.967323] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.989786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.405697] Bluetooth: hci0: command tx timeout [ 344.468508] Bluetooth: hci1: command tx timeout [ 344.597582] Bluetooth: hci2: command tx timeout [ 344.788526] Bluetooth: hci3: command tx timeout [ 344.980643] Bluetooth: hci4: command tx timeout [ 344.981119] Bluetooth: hci5: command tx timeout [ 345.108851] Bluetooth: hci6: command tx timeout [ 345.109275] Bluetooth: hci7: command tx timeout [ 346.453000] Bluetooth: hci0: command tx timeout [ 346.517718] Bluetooth: hci1: command tx timeout [ 346.645023] Bluetooth: hci2: command tx timeout [ 346.837584] Bluetooth: hci3: command tx timeout [ 347.029053] Bluetooth: hci4: command tx timeout [ 347.029222] Bluetooth: hci5: command tx timeout [ 347.156598] Bluetooth: hci6: command tx timeout [ 347.156772] Bluetooth: hci7: command tx timeout [ 348.500837] Bluetooth: hci0: command tx timeout [ 348.564549] Bluetooth: hci1: command tx timeout [ 348.693870] Bluetooth: hci2: command tx timeout [ 348.884587] Bluetooth: hci3: command tx timeout [ 349.078112] Bluetooth: hci5: command tx timeout [ 349.078293] Bluetooth: hci4: command tx timeout [ 349.204726] Bluetooth: hci6: command tx timeout [ 349.204891] Bluetooth: hci7: command tx timeout [ 350.549576] Bluetooth: hci0: command tx timeout [ 350.614466] Bluetooth: hci1: command tx timeout [ 350.741465] Bluetooth: hci2: command tx timeout [ 350.933592] Bluetooth: hci3: command tx timeout [ 351.125800] Bluetooth: hci5: command tx timeout [ 351.125898] Bluetooth: hci4: command tx timeout [ 351.253515] Bluetooth: hci6: command tx timeout [ 351.253979] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 17:27:09 Registers: info registers vcpu 0 RAX=0000000000000246 RBX=1ffff11005269d8c RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88803449dd8c RBP=0000000000000000 RSP=ffff88802934ec48 R8 =0000000000000000 R9 =fffffbfff0c80afa R10=ffffffff864057d7 R11=ffff8880222bf00c R12=0000000000000002 R13=0000000000000000 R14=ffffffff85c18c40 R15=0000000000000000 RIP=ffffffff81502dce RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff678ebb540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8b1a1a2008 CR3=000000003453e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888030e2f828 RCX=0000000000000001 RDX=1ffff110061c5f10 RSI=ffff888030e2faa8 RDI=ffffffff81b16b76 RBP=ffff888030e2f880 RSP=ffff888030e2f810 R8 =0000000000000001 R9 =ffff888030e2f868 R10=000000000003ab7c R11=0000000000022ac6 R12=ffff888030e2f8f0 R13=0000000000000000 R14=ffff88800ee09bc0 R15=0000000000000cc0 RIP=ffffffff81348c1b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2d2e6e3540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2d2e87e4a1 CR3=000000000b79a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000