Warning: Permanently added '[localhost]:10108' (ECDSA) to the list of known hosts. 2025/01/26 23:10:15 fuzzer started 2025/01/26 23:10:16 dialing manager at localhost:40883 syzkaller login: [ 69.209816] cgroup: Unknown subsys name 'net' [ 69.318165] cgroup: Unknown subsys name 'cpuset' [ 69.334202] cgroup: Unknown subsys name 'rlimit' [ 76.602725] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/26 23:10:34 syscalls: 206 2025/01/26 23:10:34 code coverage: enabled 2025/01/26 23:10:34 comparison tracing: enabled 2025/01/26 23:10:34 extra coverage: enabled 2025/01/26 23:10:34 setuid sandbox: enabled 2025/01/26 23:10:34 namespace sandbox: enabled 2025/01/26 23:10:34 Android sandbox: enabled 2025/01/26 23:10:34 fault injection: enabled 2025/01/26 23:10:34 leak checking: enabled 2025/01/26 23:10:34 net packet injection: enabled 2025/01/26 23:10:34 net device setup: enabled 2025/01/26 23:10:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/26 23:10:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/26 23:10:34 USB emulation: enabled 2025/01/26 23:10:34 hci packet injection: enabled 2025/01/26 23:10:34 wifi device emulation: enabled 2025/01/26 23:10:34 802.15.4 emulation: enabled 2025/01/26 23:10:34 fetching corpus: 0, signal 0/0 (executing program) 2025/01/26 23:10:36 starting 8 fuzzer processes 23:10:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/4, 0x4}, {&(0x7f00000001c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/147, 0x93}], 0x3}, 0x6}, {{&(0x7f00000003c0)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/226, 0xe2}], 0x1, &(0x7f0000000580)=""/181, 0xb5}, 0x800}, {{&(0x7f0000000640)=@hci, 0x80, &(0x7f0000001c00)=[{&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/248, 0xf8}, {&(0x7f00000008c0)=""/149, 0x95}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/172, 0xac}, {&(0x7f0000001a40)=""/100, 0x64}, {&(0x7f0000001ac0)=""/199, 0xc7}, {&(0x7f0000001bc0)=""/2, 0x2}], 0x8, &(0x7f0000001c80)=""/127, 0x7f}, 0x8}, {{&(0x7f0000001d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/218, 0xda}], 0x1, &(0x7f0000001ec0)=""/235, 0xeb}, 0x6}, {{&(0x7f0000001fc0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002040)=""/163, 0xa3}], 0x1}, 0x3ff}, {{&(0x7f0000002140)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002340)=[{&(0x7f00000021c0)=""/189, 0xbd}, {&(0x7f0000002280)=""/162, 0xa2}], 0x2, &(0x7f0000002380)=""/114, 0x72}, 0x2}, {{&(0x7f0000002400)=@ax25={{}, [@default, @default, @remote, @bcast, @default, @netrom, @remote, @bcast]}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002480)=""/1, 0x1}], 0x1, &(0x7f0000002500)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000003500)=@in, 0x80, &(0x7f0000004940)=[{&(0x7f0000003580)=""/142, 0x8e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/44, 0x2c}, {&(0x7f0000004680)=""/221, 0xdd}, {&(0x7f0000004780)=""/56, 0x38}, {&(0x7f00000047c0)=""/33, 0x21}, {&(0x7f0000004800)=""/29, 0x1d}, {&(0x7f0000004840)=""/131, 0x83}, {&(0x7f0000004900)=""/13, 0xd}], 0x9, &(0x7f0000004a00)=""/4096, 0x1000}, 0x3}], 0x8, 0x42, &(0x7f0000005c00)={0x0, 0x3938700}) getpeername$packet(0xffffffffffffffff, &(0x7f0000008700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008740)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f000000ab80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000abc0)=0x14, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f000000ac00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000ac40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f000000ac80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000acc0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f000000ad00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000ad40)=0x14, 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000afc0)={'gre0\x00', &(0x7f000000af00)={'ip_vti0\x00', 0x0, 0x40, 0x80e8, 0x1, 0xffffffe1, {{0x23, 0x4, 0x0, 0x3d, 0x8c, 0x66, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xa5, [@dev={0xac, 0x14, 0x14, 0x39}]}, @rr={0x7, 0x7, 0x35, [@private=0xa010102]}, @lsrr={0x83, 0x7, 0x3e, [@remote]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xec, 0x1, 0x4, [{@multicast1, 0x2}, {@private=0xa010102, 0x2ac0}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x80000000}, {@remote}]}, @ssrr={0x89, 0xb, 0x12, [@remote, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1f, 0x2, [{0x6, 0x8, "d24d2529dd7c"}, {0x6, 0x11, "f1d5d7be9a75b2128c98713fba8536"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000b080)={'syztnl2\x00', &(0x7f000000b040)={'gre0\x00', 0x0, 0xff20, 0x700, 0x5, 0x4, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x67, 0x0, 0xc7, 0x4, 0x0, @broadcast, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000b140)={'gretap0\x00', &(0x7f000000b100)={'erspan0\x00', 0x0, 0x8, 0x7, 0x401, 0x4, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x64, 0x0, 0x20, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@noop]}}}}}) r10 = accept$packet(0xffffffffffffffff, &(0x7f000000b180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000b1c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000be00)={&(0x7f0000005c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000bdc0)={&(0x7f000000b200)={0xb9c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7d}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0x20, 0x7, 0x200}, {0x0, 0x1f, 0x6, 0xe37b}, {0x3f, 0x2, 0xff, 0x7}, {0x8001, 0xff, 0x4, 0xfe9}, {0x9, 0x20, 0x8, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3c, 0x80, 0x6, 0x3}, {0x20, 0x81, 0x8, 0xec0}, {0x800, 0x0, 0x39, 0xffffce90}, {0x6, 0xfb, 0x40, 0x7fff}, {0x1, 0x3, 0x5, 0x8001}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1c3d1c68}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xf3a0, 0x0, 0x9}, {0x2, 0x3f, 0x8, 0x9}, {0x5, 0x9, 0x81, 0x20}, {0x5, 0x4, 0x7f, 0xfffffc01}, {0x7, 0xfc, 0xc0, 0x40}, {0x800, 0xa5, 0x20, 0x1}, {0x176, 0x40, 0x0, 0xffffffff}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x1, 0x0, 0x8001}, {0x1, 0x0, 0x1, 0x16a}, {0x80, 0xe9, 0x9, 0xce9d}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5418}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x80, 0x5, 0x80, 0x2}, {0x9, 0x6, 0x9, 0x8b}, {0x2, 0x3f, 0x2e, 0xe24e}, {0x40, 0x6, 0x81, 0xfffffffb}, {0x4, 0x4, 0x4, 0x4}, {0x3f46, 0x0, 0x3, 0x3e4d435e}, {0x9e5a, 0x6, 0x81, 0x4ce1d048}, {0x2, 0x2, 0x80, 0x1}, {0xa8a2, 0x3, 0x4, 0x40}, {0x0, 0x1}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r11}}}]}}]}, 0xb9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f000000be80), r0) sendmsg$BATADV_CMD_SET_VLAN(r12, &(0x7f000000bf40)={&(0x7f000000be40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f000000bf00)={&(0x7f000000bec0)={0x1c, r13, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000800) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bfc0), r12) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f000000c080)={&(0x7f000000bf80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f000000c040)={&(0x7f000000c000)={0x2c, r14, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000801) bind$packet(r10, &(0x7f000000c0c0)={0x11, 0x6, r9, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f000000c200)={&(0x7f000000c140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c1c0)={&(0x7f000000c180)={0x2c, r13, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}}, 0x0) 23:10:36 executing program 1: r0 = socket$inet(0x2, 0x800, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockname(r0, &(0x7f0000000040)=@in={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x80) getitimer(0x1, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)=0x3) r3 = accept4(r2, &(0x7f00000002c0)=@generic, &(0x7f0000000340)=0x80, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000380)=0x40, &(0x7f00000003c0)=0x2) accept$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x194, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb9}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x44}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x106e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x270}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x135a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1b4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) setsockopt(r0, 0xffffffff, 0x6, &(0x7f00000008c0)="a6f3fa1559ac4fa5432c3f77ab246d3242b50ed3ad0decddebe8e12282df1a1e1d75ae7ecc3978cf83bc", 0x2a) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r2) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000980), &(0x7f00000009c0), 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x17, r7, 0x1, 0xff, 0x6, @multicast}, 0x14) 23:10:36 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x408400) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x7f, r0, &(0x7f0000000000)="984a0ad1459ee25a27c2cea30395f1256d5ccd245040bfdebe70d8605bc3d88da3c9222662015108ad729ada354772d71904bb556c869dc45cc28a5334c25abe09bf77471d8152da043d81a12e7f329867a641c7c476", 0x56, 0x7fff, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x7fff, r2, &(0x7f0000000100), 0x0, 0x6e1, 0x0, 0x2, r3}]) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8808064}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2cc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfff, 0x82, 0x7b, 0x9f5e}, {0x2, 0x7, 0xfb, 0x4}, {0x1ff, 0x7, 0x8, 0x81}, {0x20, 0xe7, 0x1}, {0x1, 0x1, 0x2, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x971c}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4aa5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40}, 0x4008804) r5 = accept4(r3, &(0x7f0000000640), &(0x7f00000006c0)=0x80, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x60) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r5, &(0x7f0000006500)=[{{&(0x7f0000000940)=@caif=@dgm, 0x80, &(0x7f0000001f40)=[{&(0x7f00000009c0)=""/158, 0x9e}, {&(0x7f0000000a80)=""/143, 0x8f}, {&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/1, 0x1}, {&(0x7f0000000c80)=""/124, 0x7c}, {&(0x7f0000000d00)=""/143, 0x8f}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/142, 0x8e}], 0x9}, 0x3}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002000)=""/166, 0xa6}, {&(0x7f00000020c0)=""/232, 0xe8}, {&(0x7f00000021c0)=""/84, 0x54}, {&(0x7f0000002240)=""/104, 0x68}, {&(0x7f00000022c0)=""/203, 0xcb}, {&(0x7f00000023c0)=""/172, 0xac}, {&(0x7f0000002480)=""/57, 0x39}, {&(0x7f00000024c0)=""/125, 0x7d}], 0x8, &(0x7f00000025c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000035c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003640)=""/188, 0xbc}], 0x1, &(0x7f0000003740)=""/93, 0x5d}, 0xd5b}, {{&(0x7f00000037c0)=@can, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003840)=""/105, 0x69}, {&(0x7f00000038c0)=""/31, 0x1f}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f00000039c0)=""/249, 0xf9}, {&(0x7f0000003ac0)=""/91, 0x5b}, {&(0x7f0000003b40)=""/108, 0x6c}, {&(0x7f0000003bc0)=""/189, 0xbd}, {&(0x7f0000003c80)=""/7, 0x7}, {&(0x7f0000003cc0)=""/158, 0x9e}], 0x9, &(0x7f0000003e40)=""/102, 0x66}, 0x3b54}, {{&(0x7f0000003ec0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000005140)=[{&(0x7f0000003f40)=""/37, 0x25}, {&(0x7f0000003f80)=""/202, 0xca}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x4, &(0x7f0000005180)}, 0x2}, {{&(0x7f00000051c0)=@hci, 0x80, &(0x7f0000006400)=[{&(0x7f0000005240)=""/23, 0x17}, {&(0x7f0000005280)=""/102, 0x66}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/197, 0xc5}], 0x4, &(0x7f0000006440)=""/184, 0xb8}, 0x3}], 0x6, 0x140, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000006780)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006740)={&(0x7f00000066c0)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048c9}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000067c0)={'batadv_slave_1\x00'}) r8 = socket(0x11, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000006800)) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000006840), &(0x7f0000006880)=0x4) r9 = socket(0x2, 0x48f91e4811c4bea4, 0x80000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000068c0)={'batadv_slave_1\x00'}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000006a80)={&(0x7f0000006900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006a40)={&(0x7f0000006940)={0xfc, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x8000) [ 89.299107] audit: type=1400 audit(1737933036.458:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:10:36 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xaf84, 0x4d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dbcb17f7a6dc26fa0de18a4cc357cd22834f92472eec0f33"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f3493adce8d2413fc046d48586ae489b432d7a7310cb8dee"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x14c}, 0x1, 0x0, 0x0, 0x400c008}, 0x4010) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r2 = accept4(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000540)=0x80, 0x800) r4 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2, 0xa0101) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x1) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000007c0), 0x4) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000800)={0x1, 0x3, 0x80000001, 0x9}) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000840)='/dev/vcs#\x00', &(0x7f0000000880)="830d1ba4fbab2614de29a5eb75525e6a28f8f1fdc770a72ab1354c929c978d9458d4d4b75280f4b3b1d94dd1d8cf8cf6a7130eebae662cf98d0ba815f9bbdb51ce976ae309f1d62d68be46b5eb837d2963fd8361317323ebc562a45abf4df736804c67223bae18830de74bcf00619ff067d017918aa3d4ebb310a600bb7e3a0c85ecf5f201ddf0b7fa94831b7b22c63b86254d7ece68d5ab8c31a750897d5c31d9b5a2df864d4ce94f4e9d345024b7d05a6c1b31dc63a74679a7a53d63cef74c392c01fddb7be20470fa6f9415b360db050e902d2e50ee512a65", 0xda) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x14c, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "b422d08ba1a13f807516"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "6bd432c57a9431783b"}, @NL80211_ATTR_FILS_ERP_REALM={0x3f, 0xfa, "efd40bc0207f131abb4225e81e7ad4bc7d9060fa5c47a27be63c9ee823763bc1b288c318d55722bb5f6e07ff517c1c0aa1b7038a93d40ac7956511"}, @NL80211_ATTR_FILS_ERP_RRK={0x4}], @NL80211_ATTR_IE={0x30, 0x2a, [@ibss={0x6, 0x2, 0x7}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x45, 0x2, 0x1}}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x2, 0x0, {0x8000, 0xa60, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x80, 0x1d}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @challenge={0x10, 0x1, 0xa9}]}, @NL80211_ATTR_IE={0x36, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @mic={0x8c, 0x10, {0x847, "116c39e18abc", @short="817227f36f207f04"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "11332d361a"}, @NL80211_ATTR_FILS_ERP_RRK={0x41, 0xfc, "92dc58d5a8b006997b7037b8b898334dda5245eb44e983836f97e06ef0f18b8514a6bdd4df54bd1fe2e8c5fc019fe1ac28da2183fd4f14b926deaf2a02"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x9, 0xfc, "2102b72c31"}]]}, 0x14c}, 0x1, 0x0, 0x0, 0x4044814}, 0x800) r8 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x6, 0x44000) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3f6}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x941) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x280}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44845}, 0x40) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001000)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x48800}, 0x20000840) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000001080)=0x4, &(0x7f00000010c0)=0x2) 23:10:36 executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r0, 0x1, r1, 0xff}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0x1) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5c8d}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x38}}, 0x8880) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x3, 0x8, 0x30, 0x3}, {0x6, 0x80, 0x81, 0x4}, {0x8, 0x8, 0xff, 0x400}, {0xce, 0x24, 0x20, 0x6}, {0x6, 0x7f, 0x7, 0x5}]}, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x63}}}}, ["", ""]}, 0x28}}, 0x10) socketpair(0x22, 0xb, 0x69, &(0x7f0000000680)={0xffffffffffffffff}) getsockname(r4, &(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000740)=0x80) r5 = syz_open_dev$vcsn(&(0x7f0000000780), 0x0, 0x4d8200) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x240000c0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x64}}, 0x80) socketpair(0x1, 0xa, 0x1, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa4b8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x805) r8 = syz_open_dev$evdev(&(0x7f0000000b80), 0x71, 0x80000) fsetxattr$trusted_overlay_opaque(r8, &(0x7f0000000bc0), &(0x7f0000000c00), 0x2, 0x3) 23:10:36 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "268a53fb709d69181c13c370962746bddca304b3fda9fed04482f78a8b7dd9b076500c2ab2d70cb23b363ecf55f17e90e34bb78de8bfed1d6a524fb19e6b46f4", 0x10}, 0x48, r0) keyctl$get_persistent(0x16, 0xee00, r1) keyctl$reject(0x13, r1, 0x1ff, 0x3, r1) keyctl$reject(0x13, r1, 0x7, 0x8, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "7f61a555e96b73db456baf02901877addaf5c7b6a9ea18834c4fd3c7386dea6740dfc56a52266b9d966d28ce503cb08bc96b6c2ac5ade1665d57c0342516b8ab", 0x11}, 0x48, r0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r2, r3) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='logon\x00', r4) r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "aec09d5014bad6dfb74ccd3943e64975f9a300fa761256c0a8f0a644f0fde31c9ac9e4fd93878d7c6bf4e5e0ae7c067abf47859eb773d538395d97c2ea4e1bb4", 0x27}, 0x48, 0xfffffffffffffff8) keyctl$link(0x8, r0, r5) r6 = request_key(&(0x7f0000000540)='.dead\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='.\x00', r1) r7 = request_key(&(0x7f0000000600)='big_key\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)=']\x00', r3) keyctl$unlink(0x9, r6, r7) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000700)='\'^\x00') r8 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r6) r9 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$search(0xa, r8, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x2}, r9) keyctl$reject(0x13, 0x0, 0x0, 0x4, r5) 23:10:36 executing program 6: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040010) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004050) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200)=0x80000000, 0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@l2, &(0x7f00000002c0)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x80) socketpair(0x11, 0x80000, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000480)=0xfc00, 0x2) r4 = accept4(0xffffffffffffffff, &(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000540)=0x80, 0x1800) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x20048830) bind$bt_sco(r0, &(0x7f0000002b40)={0x1f, @none}, 0x8) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000002b80)=0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r4) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000002d80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c40)={0xec, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x35}}}}, [@NL80211_ATTR_FRAME_MATCH={0xc4, 0x5b, "a6c69fe3a1cf45e53f883e05f72d1841a520250cc196da421f270fb40534768c16c9dbc1f9e1109f891f0cb33e33d1235cb44f906dcfce49662e011074f27ad46ab403afd8463f68a47a18f0569ef30008913ed2bcaa93e213e20fc3273d2e3b16cfa34548448982a4ef1cea64c25dbc449dc5a022dfe02fb3db28b213ed2d19a1e3463754158f9eec3cebe1d67c9b1371594f9d677dd95a455710af471685dcf827943bc5562791e2a1d0798ebd06466f141731a0d03865441731a4b9c239e7"}]}, 0xec}, 0x1, 0x0, 0x0, 0x40004000}, 0x4040044) r7 = accept4(r4, &(0x7f0000002dc0)=@x25={0x9, @remote}, &(0x7f0000002e40)=0x80, 0x80000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002ec0), r7) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000003140)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003100)={&(0x7f0000002f00)={0x1e8, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff9944}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40008}, 0x80) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000032c0)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0x3, 0x3, 0x1ff, 0x4]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x704}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4) 23:10:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000080)={0xaa0, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0xff, 0x4}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xa00, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x37c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x6}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x63, 0x8, {0x53d, 0xc79, "9a9bd46083f8890bc8e214b325e978124b94c131caa1710968b75884ffe2cf6010cf99920372a8144797774d610c1f31f93f21033efe67804b9d018358e962a5233eeda71021385cad16ccd294372f082cc8c2916fa23d"}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @private=0xa010102}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xec, 0xa, "7fa362ba4e5a93097e69c5097245ba7bf8a59bd3ca797f979774be9f3bfd8aeeae7e27082b13ada7c47dc387097d299f1fb1251c2418b2d9a5b0e34f5fed63936b153b57631d173ea2b8c023b6cf72fb22221fcee8e823433ec7f8eba87ad6793448e4efe6db5d9f4d9786269668fc3e3f3fde8cf1e0effef1c9d8ab753400213feea8da3355b265192bb9e06ad6b15db93e6b231b1e6151125668585b2aa14176ba2ec824cd790810ac900aa51b13153a7f090f305531102621e41d9826e2d0738d4a6012534a6285dffddbc6c88702e93dffdadc1040c07ec6e39d5ce8e0dc840a95faaae278c4"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xa8, 0xb, "d2178435eb8d86967bd0151949d48446bd545b4c43e86d2c20bd2ea013d0fdb96a99d5ab6f6fd288dd57817ea5fc79cf7b0a2cb0597657c5077528faf8c40cfe30159e019d343c39fb9c1650c6a52c359af385913b0f5eedcb5c208919f7ce993d69291ab29efd2c012c74378023ab02b4bc41ad7e6ea93ee9df11feb00d749a1fadb3a9d5c4a4d54f510864549186250070d7145980ae50063429b3dbbf88737a022676"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x83, 0x8, {0x7, 0x8, "531d2a1fedfe7c45c6bf5ae37d4e9294a50ed849cfe8b602c10d16fe6d5c47ec9aa9099ae26df5286f41b3e353143302ac304da2fe276dca662e456cc5a85f87238f6e01448168da5c53266695e5f4a9bf98bdbbe323f5c359ea6f19c102ad3aceddb9eb6f56f78ca0afac4d472d5a04ebd39aa4f58d5e"}}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xd3, 0xb, "6439b636d62fc759342e00956f26b61eb22b2820f882eead86cd333eea8b676749021513537fac76786aa97a83ce6bce0a841d6b9e5ce90319a7e5869de6a6710382bd0d8cd501f990357f953940f368657dad61dc8048e828d58153d09deb0bff89cd2cdab201d7527c14cecbeb5e0eb0c41f21fd317e986029abe50c023baceb07e51861ce9629e44607a66e4d4dbface4ca9972eb12081042bb0cbfab025e53c8c6dd89febe242d8803994833ad666a9b862c7935fb7ad16ce6f147ed2817533673f1550b80f7b08d86f61f0fb0"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x6b7}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x450, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x3d4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xeb, 0x0, "bad8edea40a0661dae84cc447329fdce923633adf840efe4f9fa2b6a1b566623f335b00cd899f5adc7790c829efe8eaf32b6f32dd0254bf6718d0a1c0c3960874affe00543f24980c2c45753b18c5fe069af87c91623d6d5859a6ee45fdb9c57697cfba789d6e8b7fe3a36bac2e36faa5ebb52d80def9efd7c4b94a9e93b1427cfca0fee3ad2ef936495711794a9a34ab15c0c8f6b64bc4934fe04d1d5e95530ffcaffcbc22b11bb3e2791f94f7369257818e19451f2f053b9bdcd1f9d7d017b70b24da393747e9068edd9bad266da739a85f9e44b8006959acd06759c91565ce92362d8885c9e"}, @NL80211_BAND_6GHZ={0x9d, 0x3, "eaef5935efafa0899ceb9a398ba829d024cbcc783c3731ca3e5eec1286e762717cc1b190c372cf5736c9d55f61682059a72caafedfd831d5660b56123f66f1137add8ab36237f58e40745201ede0a26792a84d48f071d750c6e8a4e0e0a6cb1fba742f6504ea505b3a7ee9306f129e800b904bb304537d56743ed32529ed3d489891d32e984355dcb8d77e2724f1546ced0c90a2e1a9ff5fdb"}, @NL80211_BAND_6GHZ={0xff, 0x3, "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"}, @NL80211_BAND_6GHZ={0x57, 0x3, "fb9d3f47960e7a24aad19569f224bf3554749b275a53b978b0253e2f6d86b2cb81f830be6fd65d337fe8cfdd55ff035170af10deb87c55d045afa9e12a39dcddce777f8755d16eba5b25f08fb8009213334e1a"}, @NL80211_BAND_5GHZ={0xe9, 0x1, "a3ede2cc6ce0910ee137597d5b70f600bd61eaa66ede9db6d47639be837cb7ce8aa36c39f7294360a32da0aeb454aaa11f10b526042c837e145b5ba31a8ecfdce3abe60e0106b5a7809d7324aa096da759b88724c22611c9ed044162e3e92d809c9d8e866c89945773c892c90676f388fbf430bfd64096a65a754872da9d389269dfde7636685861e833f17a214662ba98b68fd61c0d2df428d8035a1786b2c99d6b773441a68271396ee740d5335b6324678cd8d60e22fb48e630b86d5f410d4fb27610bd4379a983d9a012abaff4f79955ae410c07be5cccab3412ed2dd271520df8ca93"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000000}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1000}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x100}, {0x8, 0x0, 0x40}, {0x8, 0x0, 0xfffffffc}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x224, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x4}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x107, 0x8, {0x6, 0x2, "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"}}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xeb, 0xb, "acf03bfb7ea0c36f75d99eff71694077a6704334327f949299c3a97781ee9ee92a59615b367bddeb48d2eeddaa5307d19d16d32671ac271879abf5f9c238a4b9d56a6338fcdbc541685a8b4c548cc64d587a853d599afaf0720233dea81ddb4a8af9900a39faeb3ce057f79450f76aa0ea3345ec4354bdd445bf624fc9064ed6a1560b02b4de6e70f4c9ae7183a8a96c117412962255a032569931c7508d928199604edcd394e08484cee94e5a5f1ecded872acee9b3be5f7b92cbcea196ce6c1c5bc20c61c134af5434dc9cbcee2749cf31d77908ec8dc32f50f8c3fd195821682fe9f9da2929"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x14, 0x6, "06ae07b6ae5a6f77b2695014bd088e35"}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x78, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x68, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_IE={0xe, 0x2a, [@dsss={0x3, 0x1, 0x38}, @ibss={0x6, 0x2, 0x9}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}, {0x8}, {0x8, 0x0, 0x660}, {0x8, 0x0, 0x54f6}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0xfffffffb}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x9}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x4008094}, 0x24000010) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c00), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc050}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001b00)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000f80)={0xb1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc16, 0x6c}}}}, [@NL80211_PMSR_ATTR_PEERS={0xaf4, 0x5, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1eb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x228, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa67b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x320, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x62}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x28}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x292}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x242}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffaf36}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf58f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2559}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x20c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x82c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xe8090387e10a7b34}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35e}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x33}]}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x348}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}]}]}]}, 0xb1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r4 = socket(0x2a, 0x6, 0xb55) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001b80), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x34, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000001d00)={0x8, &(0x7f0000001cc0)=[{0x78, 0x6, 0x0, 0x7ff}, {0x1000, 0x5, 0x3, 0x8}, {0xfff7, 0x5, 0xc1, 0x9}, {0x7, 0xe9, 0x0, 0x5}, {0x973c, 0xc1, 0x4f, 0x5}, {0x1000, 0x82, 0x3f, 0x2}, {0x6, 0x7, 0x1, 0xfff}, {0x6, 0x0, 0x1}]}, 0x10) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000001d80)={0x1, &(0x7f0000001d40)=[{0x9, 0x7, 0x80, 0x6332ec22}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001ec0)={'gretap0\x00', &(0x7f0000001e00)={'erspan0\x00', r6, 0x20, 0x7800, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x3, 0x98, 0x68, 0x0, 0xf9, 0x0, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x7, 0x2b, [@empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0xb7, 0x3, 0x0, [{@multicast1}, {@multicast1, 0x400}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x362}, {@broadcast, 0x80}, {@remote}, {@remote, 0x3}, {@empty, 0x400}]}, @noop, @noop, @cipso={0x86, 0x20, 0x3, [{0x2, 0x6, "dac438ee"}, {0x6, 0xf, "e4331057b830a660566dcc5f5a"}, {0x0, 0x3, 'H'}, {0x7, 0x2}]}, @rr={0x7, 0xf, 0x32, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3d}, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x90) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = socket(0x23, 0x1, 0x7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x74d}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c4}, 0x20000000) [ 90.856628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.858114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.862754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.868224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.873351] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.879584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.892172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.894773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.898709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.900464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.904910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.904944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.908877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.914246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.918907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.919839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.922117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.924432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.929107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.931063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.932888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.936714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.938030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.942945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.944412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.946075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.951023] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.954725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.956828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.959091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.964084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.966037] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.973261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.977493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.979839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.981893] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.986355] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.989343] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.990891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.008169] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.012951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.015307] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.017477] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.023151] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.025026] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.027788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.042746] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.084093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.995291] Bluetooth: hci3: command tx timeout [ 92.995357] Bluetooth: hci0: command tx timeout [ 93.059692] Bluetooth: hci1: command tx timeout [ 93.059764] Bluetooth: hci2: command tx timeout [ 93.123741] Bluetooth: hci5: command tx timeout [ 93.123872] Bluetooth: hci4: command tx timeout [ 93.125101] Bluetooth: hci7: command tx timeout [ 93.126690] Bluetooth: hci6: command tx timeout [ 95.043719] Bluetooth: hci0: command tx timeout [ 95.043752] Bluetooth: hci3: command tx timeout [ 95.106764] Bluetooth: hci1: command tx timeout [ 95.106995] Bluetooth: hci2: command tx timeout [ 95.171086] Bluetooth: hci6: command tx timeout [ 95.172266] Bluetooth: hci7: command tx timeout [ 95.172603] Bluetooth: hci4: command tx timeout [ 95.172982] Bluetooth: hci5: command tx timeout [ 97.090778] Bluetooth: hci3: command tx timeout [ 97.091368] Bluetooth: hci0: command tx timeout [ 97.154605] Bluetooth: hci2: command tx timeout [ 97.157285] Bluetooth: hci1: command tx timeout [ 97.219403] Bluetooth: hci4: command tx timeout [ 97.222645] Bluetooth: hci6: command tx timeout [ 97.223100] Bluetooth: hci7: command tx timeout [ 97.223915] Bluetooth: hci5: command tx timeout [ 99.138627] Bluetooth: hci3: command tx timeout [ 99.138650] Bluetooth: hci0: command tx timeout [ 99.202685] Bluetooth: hci1: command tx timeout [ 99.202812] Bluetooth: hci2: command tx timeout [ 99.267623] Bluetooth: hci5: command tx timeout [ 99.267672] Bluetooth: hci4: command tx timeout [ 99.268444] Bluetooth: hci7: command tx timeout [ 99.269783] Bluetooth: hci6: command tx timeout [ 150.177334] syz-executor.1 (282) used greatest stack depth: 24520 bytes left [ 150.397079] syz-executor.3 (283) used greatest stack depth: 23520 bytes left [ 152.657199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.661115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.663651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.669702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.674841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.677367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.727398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.729890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.733703] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.738057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.741017] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.743214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.792648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.795459] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.805369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.812823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.818771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.823054] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.855019] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.869160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.876765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.903201] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.905009] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.910888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.917163] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.923216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.926317] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.927821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.929230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.933768] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.933855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.940736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.952106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.955677] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.956642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.960272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.991664] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.996825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.003348] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.005105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.015808] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.017183] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.018608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.022811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.025681] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.026808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.032683] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.033795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.754698] Bluetooth: hci0: command tx timeout [ 154.818639] Bluetooth: hci1: command tx timeout [ 154.883675] Bluetooth: hci2: command tx timeout [ 154.947633] Bluetooth: hci3: command tx timeout [ 155.076109] Bluetooth: hci7: command tx timeout [ 155.076177] Bluetooth: hci6: command tx timeout [ 155.138724] Bluetooth: hci4: command tx timeout [ 155.139909] Bluetooth: hci5: command tx timeout [ 156.804567] Bluetooth: hci0: command tx timeout [ 156.866613] Bluetooth: hci1: command tx timeout [ 156.931346] Bluetooth: hci2: command tx timeout [ 156.994627] Bluetooth: hci3: command tx timeout [ 157.122616] Bluetooth: hci7: command tx timeout [ 157.124016] Bluetooth: hci6: command tx timeout [ 157.188548] Bluetooth: hci5: command tx timeout [ 157.189013] Bluetooth: hci4: command tx timeout [ 158.851672] Bluetooth: hci0: command tx timeout [ 158.914741] Bluetooth: hci1: command tx timeout [ 158.979627] Bluetooth: hci2: command tx timeout [ 159.044599] Bluetooth: hci3: command tx timeout [ 159.172609] Bluetooth: hci6: command tx timeout [ 159.173595] Bluetooth: hci7: command tx timeout [ 159.235683] Bluetooth: hci4: command tx timeout [ 159.235805] Bluetooth: hci5: command tx timeout [ 160.898634] Bluetooth: hci0: command tx timeout [ 160.962812] Bluetooth: hci1: command tx timeout [ 161.026884] Bluetooth: hci2: command tx timeout [ 161.090634] Bluetooth: hci3: command tx timeout [ 161.218929] Bluetooth: hci7: command tx timeout [ 161.219043] Bluetooth: hci6: command tx timeout [ 161.282757] Bluetooth: hci5: command tx timeout [ 161.283745] Bluetooth: hci4: command tx timeout [ 214.669994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.671885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.673968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.679390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.682191] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.686096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.742331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.750771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.752428] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.759920] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.765404] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.770819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.843004] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.848050] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.855068] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.862887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.868053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.870024] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.872260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.875429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.877771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.878808] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.880320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.887335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.938540] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.942738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.952206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.968724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.982346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.998194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.254201] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.268607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.286773] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.373019] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.390353] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.393388] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.631316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.645968] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.647081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.650574] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.664049] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.665757] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.666857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.708662] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.711920] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.736791] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.751003] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.767396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.771585] Bluetooth: hci0: command tx timeout [ 216.835603] Bluetooth: hci1: command tx timeout [ 216.898884] Bluetooth: hci3: command tx timeout [ 216.962552] Bluetooth: hci2: command tx timeout [ 217.091925] Bluetooth: hci4: command tx timeout [ 217.794602] Bluetooth: hci6: command tx timeout [ 217.794634] Bluetooth: hci5: command tx timeout [ 217.859573] Bluetooth: hci7: command tx timeout [ 218.818614] Bluetooth: hci0: command tx timeout [ 218.882589] Bluetooth: hci1: command tx timeout [ 218.946621] Bluetooth: hci3: command tx timeout [ 219.010578] Bluetooth: hci2: command tx timeout [ 219.140638] Bluetooth: hci4: command tx timeout [ 219.842708] Bluetooth: hci6: command tx timeout [ 219.843805] Bluetooth: hci5: command tx timeout [ 219.908512] Bluetooth: hci7: command tx timeout [ 220.868627] Bluetooth: hci0: command tx timeout [ 220.931540] Bluetooth: hci1: command tx timeout [ 220.995528] Bluetooth: hci3: command tx timeout [ 221.059705] Bluetooth: hci2: command tx timeout [ 221.187687] Bluetooth: hci4: command tx timeout [ 221.891643] Bluetooth: hci5: command tx timeout [ 221.891764] Bluetooth: hci6: command tx timeout [ 221.954763] Bluetooth: hci7: command tx timeout [ 222.914701] Bluetooth: hci0: command tx timeout [ 222.980560] Bluetooth: hci1: command tx timeout [ 223.042608] Bluetooth: hci3: command tx timeout [ 223.106608] Bluetooth: hci2: command tx timeout [ 223.234690] Bluetooth: hci4: command tx timeout [ 223.938608] Bluetooth: hci6: command tx timeout [ 223.938647] Bluetooth: hci5: command tx timeout [ 224.002585] Bluetooth: hci7: command tx timeout [ 276.776007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.778400] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.782803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.795428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.803523] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.811213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.899833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.903383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.906077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.916174] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.924698] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.930020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.036983] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.042974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.046228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.054094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.059767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.063051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.213293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.216435] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.224925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.235800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.237151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.241555] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.248214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.256917] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.262785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.267939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.278683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.289679] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.297860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.300128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.301687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.348956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.352408] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.354880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.409371] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.411244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.463740] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.466608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.467574] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.470952] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.475244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.478915] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.481828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.558784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.587560] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.600765] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.852637] Bluetooth: hci0: command tx timeout [ 278.979654] Bluetooth: hci1: command tx timeout [ 279.106640] Bluetooth: hci2: command tx timeout [ 279.426948] Bluetooth: hci3: command tx timeout [ 279.427681] Bluetooth: hci4: command tx timeout [ 279.491620] Bluetooth: hci5: command tx timeout [ 279.619711] Bluetooth: hci7: command tx timeout [ 279.748566] Bluetooth: hci6: command tx timeout [ 280.898778] Bluetooth: hci0: command tx timeout [ 281.026643] Bluetooth: hci1: command tx timeout [ 281.154849] Bluetooth: hci2: command tx timeout [ 281.475718] Bluetooth: hci3: command tx timeout [ 281.475893] Bluetooth: hci4: command tx timeout [ 281.539831] Bluetooth: hci5: command tx timeout [ 281.668342] Bluetooth: hci7: command tx timeout [ 281.794896] Bluetooth: hci6: command tx timeout [ 282.949522] Bluetooth: hci0: command tx timeout [ 283.075534] Bluetooth: hci1: command tx timeout [ 283.203552] Bluetooth: hci2: command tx timeout [ 283.522585] Bluetooth: hci3: command tx timeout [ 283.522758] Bluetooth: hci4: command tx timeout [ 283.586524] Bluetooth: hci5: command tx timeout [ 283.714557] Bluetooth: hci7: command tx timeout [ 283.842592] Bluetooth: hci6: command tx timeout [ 284.995642] Bluetooth: hci0: command tx timeout [ 285.122727] Bluetooth: hci1: command tx timeout [ 285.252496] Bluetooth: hci2: command tx timeout [ 285.570830] Bluetooth: hci4: command tx timeout [ 285.571375] Bluetooth: hci3: command tx timeout [ 285.635620] Bluetooth: hci5: command tx timeout [ 285.763622] Bluetooth: hci7: command tx timeout [ 285.891538] Bluetooth: hci6: command tx timeout [ 339.603523] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.605857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.611970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.623326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.626316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.628041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.749396] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.755537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.757899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.763210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.768082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.775188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.775638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.798181] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.803129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.805942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.808428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.808874] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.813198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.818780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.822849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.823074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.830610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.832074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.838785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.843631] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.847354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.848740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.854653] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.862281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.936336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.940845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.943185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.950829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.952230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.957223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.964366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.970183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.971842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.974697] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.975887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.981864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.123987] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.126033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.138951] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.151618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.171296] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.202715] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.698661] Bluetooth: hci0: command tx timeout [ 341.893526] Bluetooth: hci4: command tx timeout [ 341.894357] Bluetooth: hci1: command tx timeout [ 341.954586] Bluetooth: hci2: command tx timeout [ 341.955225] Bluetooth: hci3: command tx timeout [ 342.146561] Bluetooth: hci6: command tx timeout [ 342.211605] Bluetooth: hci5: command tx timeout [ 342.403771] Bluetooth: hci7: command tx timeout [ 343.746680] Bluetooth: hci0: command tx timeout [ 343.939496] Bluetooth: hci1: command tx timeout [ 343.940001] Bluetooth: hci4: command tx timeout [ 344.002563] Bluetooth: hci3: command tx timeout [ 344.003009] Bluetooth: hci2: command tx timeout [ 344.194538] Bluetooth: hci6: command tx timeout [ 344.258530] Bluetooth: hci5: command tx timeout [ 344.450517] Bluetooth: hci7: command tx timeout [ 345.794535] Bluetooth: hci0: command tx timeout [ 345.986552] Bluetooth: hci1: command tx timeout [ 345.987013] Bluetooth: hci4: command tx timeout [ 346.050668] Bluetooth: hci3: command tx timeout [ 346.051266] Bluetooth: hci2: command tx timeout [ 346.242812] Bluetooth: hci6: command tx timeout [ 346.306555] Bluetooth: hci5: command tx timeout [ 346.498607] Bluetooth: hci7: command tx timeout [ 347.842609] Bluetooth: hci0: command tx timeout [ 348.034607] Bluetooth: hci4: command tx timeout [ 348.035702] Bluetooth: hci1: command tx timeout [ 348.099616] Bluetooth: hci2: command tx timeout [ 348.100390] Bluetooth: hci3: command tx timeout [ 348.290623] Bluetooth: hci6: command tx timeout [ 348.354597] Bluetooth: hci5: command tx timeout [ 348.546748] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:15:44 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000092cc0 RCX=0000000000000000 RDX=1ffff11006a02bb0 RSI=ffffffff85cfc380 RDI=0000000000092cc0 RBP=ffff88802b5cfc90 RSP=ffff88802b5cfc30 R8 =0000000000000001 R9 =ffff888035015d88 R10=ffffffff864043d7 R11=0000000000000001 R12=ffff888008c4f780 R13=0000000000092cc0 R14=00000000000000e8 R15=ffffffff81aef37f RIP=ffffffff81a4b1c8 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3f9b4af540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3f9b64a4a1 CR3=0000000030e2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88802b597b18 RCX=ffffffff84a0ee7b RDX=0000000000000004 RSI=ffffffff84a0eecb RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffff88802b5979c0 R8 =0000000000000000 R9 =ffffed1005b0f000 R10=0000000000000001 R11=0000000000000001 R12=ffff888028427c0e R13=ffffed10056b2f6a R14=ffff88802b597b55 R15=0000000000000000 RIP=ffffffff84a0ef1a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e4f5758080 CR3=000000000cf66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000