syzkaller login: [ 67.207609] sshd (238) used greatest stack depth: 24112 bytes left Warning: Permanently added '[localhost]:41542' (ECDSA) to the list of known hosts. 2025/01/29 15:11:18 fuzzer started 2025/01/29 15:11:19 dialing manager at localhost:40187 [ 74.655098] cgroup: Unknown subsys name 'net' [ 74.793334] cgroup: Unknown subsys name 'cpuset' [ 74.822042] cgroup: Unknown subsys name 'rlimit' [ 80.275630] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 90.901068] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/29 15:11:36 syscalls: 233 2025/01/29 15:11:36 code coverage: enabled 2025/01/29 15:11:36 comparison tracing: enabled 2025/01/29 15:11:36 extra coverage: enabled 2025/01/29 15:11:36 setuid sandbox: enabled 2025/01/29 15:11:36 namespace sandbox: enabled 2025/01/29 15:11:36 Android sandbox: enabled 2025/01/29 15:11:36 fault injection: enabled 2025/01/29 15:11:36 leak checking: enabled 2025/01/29 15:11:36 net packet injection: enabled 2025/01/29 15:11:36 net device setup: enabled 2025/01/29 15:11:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 15:11:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 15:11:36 USB emulation: enabled 2025/01/29 15:11:36 hci packet injection: enabled 2025/01/29 15:11:36 wifi device emulation: enabled 2025/01/29 15:11:36 802.15.4 emulation: enabled 2025/01/29 15:11:36 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 15:11:38 starting 8 fuzzer processes 15:11:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x24}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0xc0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc0c1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x101, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c000}, 0x40804) r2 = socket(0x6, 0x5, 0xffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x45c, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xd8, 0x45, "61aedab15585cb7ed203287800ccd99eedd2a0943296e188e42790a9ea4ede30b671ac0a4e5b2e665d73e43a39ff8bdef03bdc0a95394e28471e2bfcbe94a52410f953cf86fa748cb4747456d9956fc57ba44bedc255012c317162caf2826598eb9d867f4b4de2f2044c9b8d95f355504a1663ca0caaf951cc8f51d9cd98b7725e161801c7ed55990ff36b2e89d41946e08b16f805192664088e53308c3cb17d7060dbe214010361222225826bbc9d93c3e93ac692a3d9ac878bcc66b1f51e4271d20b3778236a96ffb5863f5800f744d54f92a9"}, @NL80211_ATTR_TESTDATA={0xca, 0x45, "831b9c846f7a72c45782ca99c187e6188f69243362e80d9cd1c881bad00196b7b7dd4e9d830d82a265b373a1e69869985f1d6d7c1b094771f524bb8ee3e0a6a4c6c8df19126ec6bb67352b524b9123c6e62468f1f1be76eba3cd9da59e9fea3b3b9653e32072bf8833972804f125f9b497b2da02edb202838c47b2bff3eedf8b60c7f7f2a94db6b559470ce9f1e32b69c3d3280f91b310f562465bc88aa1a3d96aad1b7b47148b9346a116bc075204b42db9bbbae5be631576edb220797ee8c95bcf409ef570"}, @NL80211_ATTR_TESTDATA={0x36, 0x45, "2fa4abf3f1f217c38f5dfb85db1789093b5c6dbf7026f4eef02d8786d8227cc6b072fd3e29794077f28c54b597288d53a637"}, @NL80211_ATTR_TESTDATA={0xf0, 0x45, "3b0c3727e59ffb8dba4ce5a43c377f9bc13ebde40b8513e73a77d32392faef4f8edbe1142704750d60215ae216d22bd39369c8ff481209b01cb8ee184dcfa17b3b62fbcb162a96541256d5cafe5969726fc0cf5815514d23f558cbe25f36960ca9d63a30ac547146a9882d238ccae5efcf076cf78bba9046011dffc4d709b253d64e61dd34e1cd7e3ec6f107046094d0919720574a8bdeed71d50bbb13ad2207404724bd00b0a1892fe8148814a3aca65a384f679edcda64e54e7130b0ec4d60dff5b8b7e4fce827ac2df35c203564b06470142e8290b1405e60150ebde4747c5c7afb820526646bfb40a808"}, @NL80211_ATTR_TESTDATA={0x3e, 0x45, "44ea51e5cd76187c024e18f612f7ea51a26cb65f16e2edb62a1c44e74831331b974d1feab821f1c2db39d5c8743018319e99c6208716495c99f8"}, @NL80211_ATTR_TESTDATA={0x55, 0x45, "c51cdabaa84eb9e8ac2748c8c74a16043bd437c13574461b6e7558a6cf99bf10b18e74122f9313941c59e59bded9ede18426dbe0ea0fabdb705b4c8369f9f4b7730cf82e0f41474040e401db6869fc52aa"}, @NL80211_ATTR_TESTDATA={0xe3, 0x45, "6bb55fe24585ce5c1ebf5601f070b05ee46bb8cfe37aa73e5753878d75de297f959cf1e07c9e13c6b633c88a9d563f281923501e6787cd181ac083ffc6e1cc89df0308e38aee3b13e27944fe97bcdc158bb9532417270efe1a266e768f79a22389c9d9e1e6f305306d705dc860eeef0c9f1a13b56780615ecacd8b8b67a1d4c81c302f07d4b1f7b64e66195a69809061d58086ec85863da117b065aa5d1de7c69db5cc2bec8b048e13b779b05029c373b61c091f99eca7bb6ad89e3e568158c1b726d5a08940bad66bbad2fcc415dcabf831cce86f920ba5f638962d70a0ea"}]}, 0x45c}}, 0x40008000) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000900), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000e80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a40)={0x3fc, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0x0, 0x6, 0x3}, {0x9, 0x7f, 0x9, 0x10000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x477b}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x4}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000001040)={&(0x7f0000000ec0), 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xdc, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7f, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x61, 0x2a, [@dsss={0x3, 0x1, 0x28}, @random_vendor={0xdd, 0x3d, "402c1ddf0b0254c64ace1abd3313dad1f9cec1ae4b355b10a09c045276441d123e5c76f04aef3c9248d8f2ee7f60f4c807acdceaeb4ce6d8df6a35f028"}, @peer_mgmt={0x75, 0x16, {0x1, 0xfffb, @val=0x5, @void, @val="32241df7220a9949531a1635dcd639fd"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x14, 0x34, @random="f9601a48c784609d258e8a61df321d2b"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1000}, 0x44010) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000001080)=@ccm_128={{0x303}, "76782b07fd853c32", "7cc2ae3ae3b3694da943c3c45af4ecbe", "5f6f5fc2", "ef1da47aa5b43710"}, 0x28) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r10, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x18}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x4010) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001200)='htcp\x00', 0x5) 15:11:38 executing program 1: r0 = shmget(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/182) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/226) r2 = shmget(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000200)=""/133) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2ac, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x39}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8c5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdf04, 0xc26d, 0x76f0, 0x9, 0x43e3, 0x100, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x2, 0x7, 0x5, 0x40, 0x1f, 0xfffd]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x3}, {0x2, 0xa}, {0x7, 0x8}, {0x6, 0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x6}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x8}, {0x3, 0x4}, {}, {0x3, 0x9}, {0x7}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x3}, {0x0, 0x4}, {0x6, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x7, 0xa}, {0x7, 0x6}, {0x4, 0x2}, {0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {0x4, 0xa}, {0x1}, {0x0, 0x7}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x5, 0x60, 0x0, 0x5, 0xa, 0x2f, 0x45, 0x3, 0x24, 0x24, 0x1b, 0x18, 0x24, 0x60, 0x4, 0x5, 0x22, 0xb, 0x36, 0x4, 0x24, 0x2, 0x9, 0x6, 0x5, 0x1, 0x1]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {0x6, 0x2}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0x6}, {0x6, 0x4}, {0x3, 0x1}, {0x7, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0xa}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {}, {0x5, 0x2}, {0x7, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x6, 0x5}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x1, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0xa}, {0x6}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x5}, {0x6, 0x5}, {0x7, 0x2}, {0x7, 0x9}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x3}, {0x5, 0xa}, {0x5, 0x8}, {0x2}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x8}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x11}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x3}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x1, 0x8}, {}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x6}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x9}, {0x1}, {0x1, 0xa}, {0x4, 0x2}, {0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x1, 0x2}, {0x2}, {0x6, 0x6}, {0x7, 0xa}, {0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0xfb22411e49c7f810, 0x6, 0x16, 0x20, 0x4, 0x9, 0xc, 0x286b1dc79b7e70fe, 0x2, 0x0, 0x1, 0x1b, 0x1, 0x6, 0x30, 0x4, 0x18, 0x24, 0x2, 0x5, 0x16, 0x16, 0x1b, 0x6, 0x36, 0x26]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6, 0x48, 0x24, 0x1b, 0xb, 0x3, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0xa}, {0x1, 0x6}, {0x4, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x6}, {0x5, 0x9}, {0x5, 0x9}, {0x6}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x2, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x5, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x7}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0x4}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0x5}, {0x5, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x8, 0x101, 0xfff, 0x401, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x7}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0x2}, {0x4, 0x3}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x6}, {0x6, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x3, 0x3}, {0x2, 0x2}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xca30, 0x7e}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x8010) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, r6, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1162}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1305}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000001) syz_genetlink_get_family_id$team(&(0x7f0000000c40), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x721c, 0x26}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) 15:11:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b985f3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20040004) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x72}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x12}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x304, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x804c000}, 0x40) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x9f5aca31dbdf0578}, 0x4000804) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x560f9f1ce75cea7b) [ 93.185820] audit: type=1400 audit(1738163498.102:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:11:38 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x114d63e8dc2d300a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000049}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4008000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8800100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000840) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004014}, 0x44814) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x894) 15:11:38 executing program 4: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = memfd_secret(0x80000) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008044}, 0x50) r2 = socket(0x1d, 0x2, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7f}}}}, ["", ""]}, 0x20}}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="39be131255a7"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="696a34aac9e2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) bind$802154_dgram(r0, &(0x7f0000000480)={0x24, @none={0x0, 0xd71209453ceea553}}, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001840)={&(0x7f0000000580)={0x1290, r5, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1238, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xbc}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7c6fd12f9e52"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1208, 0xe, 0x0, 0x1, [{0x67, 0x0, "d7b05abd55035fa741516573c9ff5e6d80e924c101d3f980e52f1c59fdd767a63aacf8a566fd1a5b920e4348233198b34a2812e2a2e73c19235f25049498d721ab68587ff233c26a37a19d654985e49b6315cdc033a543ab42d9499c04424148999713"}, {0x1004, 0x0, "cf8f1890ed40094b3726f07dd9f2e65ee37143f2fcc8aab542ef995205b01564a0fc4b38d46b5c8bccb3bfc204633e48d157892ec8b03b8a8115497f5d7b654b65fc262f7e009c656bfe967c6dba36e5f0475ec38d935108168c87380b8433ed632c5e2479cb2aa83ca565ad93338ecd0d8da2d2607ca9cef3154c08c6b84cb690e2e169be024d9076ed6c47843cd58a190e716922e6bfd78dc76d83519d1a26d231ba7882fcc1d2b1548130d8b4f50f5a50f5957d68a90fe208f174379bf4033486cb8956c50f4df4dc8d7135ef23cf9bcdd94609cc4748d98a47588601da2e1e62168fe197a3a6a58f209ba2404dd6baba92ae9c772da1851be43ccc5be95ba691b51b8cc6b3190847764be7bde20debe3ceca7e788b5414aae1b5f2aeb646398b5cf287fb64058556c66028a6ca5a63647a6fe8b980afa7c37fda5dbbaf677980a1d1f26620a749390ff028a5f0eb85241039842693a8750ce0b0f3b8d9115711c548ef3fe6250af685f1a2402efcd0069269ab79903357c3901671b0904edda4a27bd7cc1180754ececd7d4d2b972bca424e2203d366c21abee0006154e729eb6754d3cfd17385ed325b299bc2280bd829fb3b4a83b1f7cbb04c1c470971c7d1bf1463b699f543870d2e6232056fc76e41ba2196d5cc498093c6e6a50697eff8208e64231d8ae7d106b62ab5a02c25de96636270fa7b57ff4d769f02e88e281f2d5caefbe4ad8ba9dce60fc5dbcf8bc3ebb2f2f46deec600eddc480118751b2f2bf2fc162cd57d278c839d2fc8daa65f8ff08b5f1d106eded5b993ea1001fb00cac3f4cc54e3c47584b380a066f240c21da51334afba3e5ca47ef9f703bf7b9db4fe798d71cace658abaa2d916bc839b04c1109af42914a4498ba1b8a4cff81b3f66d508045ce71685957ab0f962a567d36b2b13579396bfcd2c48e399909452fac14fbf693f6458962b9b3746452f88aff4e824d8e7ff0d263edf5d88255569fda2c766f2c0565d79447fab1516ff6aa320900c848d0b908fd3e6aee99552a8d8ffbd6f264bbab6c81803bc2f1fa56161427424fbaa525555575344db725edf56195f2443abcfd930252b941143df1db5abc4570bc7b67d1d148103c91055574d4178014162ca537222cb6bd1b442f57535be445e0560c4801285775de73cbcee71882e06c2a08f7978f9e1c1cabc8eae673a226dd9fea8b1500e6afc0d83f6dda96cc74db702b5a78c3cdb04efa34a68337704e28675af1b7c6858205048df8d8bbd75a07a7fdb0471326b120734738a271f56b7ac2067f1e3502a1772e24738c6d14cbaa0cca5aff5d139cf1eb4a48b7ee7e267de4b450989e474489d56f5d09f34cf49e2de85fec97e0e5a592ce7d3a81c58994983e674ebf40ff9f2bba2e57aeda28df9dbd95d0d211146146094f7fa0390d5e9657997c87957a4590b0cb635124698819884b07ff3156de64b87db9263e2d53a777f254d6d3406d9149e3118615e4c4f4ec4ab80468673907e97116fd74ece8be25d1a58c7d102c0ac6284da59dbcf46d7667baac826a482c5d31f51e282aa5ec2ed05187ae270e9eae9ea5d621fcff983db8fc016ea3987d06fa8d09ddab513b7ef91f08e5450201ecf3c6449a3da5fae0233b8ac3032c6afd8d018ebda860e595494985c426d0e08fe367ff3743a7b21a41a7183b71c5835ffec4cfa8006f8fd7124a8ecd5f94abc69a3040c59ad3644d5ffab63fa31cb395ab6e13929f85e8627109f8222de52756c4da9b021b58060097bef9bed729e598e0d108e443523b9a906a6f0bba2da675a5646b96cd03a42fca432ffbf9cd3e1ba019e5aea2d978ebfc390dc7c3bc250482aa2f856a22c98f0c3a5f8824a0643b8bfc225e5ec57dfde98922f301cc5385696cfdefe998941aa761d14f7f1a8220ea5f8ff5486219c2cbeceeea39802621bed7e75252d7937f31230ad8c254f07a094afb46ee68576a1f011c3dffa8fde1db021d2df3c806729115c5b600993169404faa9a8a83a242e15b93009176e839e495847f19c269dd2cd8e791e0d2a9db76571a1614d3824d2f528dc80c5a04e13a95913473808ada4fe6084f1c59c94249c1a09eee022e55f526804834b79aac6e67457d9a477398a98420b952a12c500936dff68ced5e851eccc19b36054e59254df5c48e501c9689ed8dfc0d9577ff2d93d28204a1b7f4b8588a6485df3c8b259366da4cd0b1c8d89419f36d568a923f146fa929f26120ddbb8b5f17506a82832ac64b3dfc8313cebb9a475447c5a30519960b4e7ff02d872ef74b850fdb5d844b83e97d61fa64cacb1e45b8ae4893dae51614b5fa4f85d407f64b36539ee39b9f60d01bd35492121379836707826f08d886fa16a1ede8181d92e5e20b5f69a6e5ed578ee7fa19fd9dddfd48cdd42a2ef2bdaf14f5f13a3ea4870e908f8138814c891715ad114b4930b131507950ff7e34733c95beff83f958cb5d412e46bd189e6bde44e8e241918fe99364afb517bdfd14edde8fdccce22f58579a43211fc7f87e139e3ef7a02c37084360b9554d2df4e606341e273ed108badd90b96c122f7e597d5568ef17ff6e983d714974d7f93935f660253322d2d0b647d894ad4f7cca268af13002f8efc76a52790ce94b538c1f19ad6987138e3dc74464facd7b0760a0630ee29fba70b72af118c31b7b7779ea26c2f64de69dd892d1f1eda2cb3dfa7a70477f895bc023801afb9a8f1adfbdfdcfa599c14e1b45167b4fca9cfbcbf6b87092aabc8549e96d1200743c49b936db35b998aac5f6ec78178d7eef82f216550086a875225d498d495380f99a838c93677f7d17204c556eb0da4e6b3c019b6266f49c2180a9cf1ecbe68297870cb328e661f73bc39d34808b1a5cd999bd327c3eb0385cf9a5c9c1393a341e9766e21e92f7208c26f2b9ff049d75aa8fe2bf396986bef87714e957d7375a0ba5e3d01d477f83cee43e7fa6ccf51be5d33f3eb6d03de3cdecb7038a08e904f4a6765cb0a3685fb511c5b1529067c7661e9949509d69ca0011010c39d4e9ecf9fb0ee9f2b504b6e758130b2bb0d0455e311ede4426f774bf268aa7cc00387c7fe1efada39472a8a057074b82976b662d1245a6092bcc28bd9009b58c6ac3156d92156201f6f082d843b43134f211dbc1b0854d205897a3fd7581153230c5d602ca78083b1b0ac63e592a4384b39ce2648529f46cbf3ad41f3943c5d8d5b86cad740498857918e28449ae3ca4f0d745ec3e7cfa0aa7de6c0139517b31d948ee77088c7ae19134a1729bae2cc851b8cb7cafe3fff93430186bc557b3eb5f8dfe7528c465fbcf287632e1cfe036a9057e1714344fbe623051c5606418031b6caa23a3d0542c85500ab0a01c0f6b245c1a14ccaef4704ee26fffd158cdf4c359bd0484038f5f84ab80f8d129cbe9ca8e45ff19796857582df3ced6c6ab48acfa452d577a54c4b45c3aa791f740ffa494e5cbfcac062894d475a1901e719dfba454a170ae54bfb695433c3bcdd109f16580806502c5d500e9904d590aef324dc53d47392a7f63e34ed59a9b5e13f7341e68a140b4e288728a9411fe8caa6e805e2c0d444327b40248fc223a7e5a3128904568797acd091823d567ce231b5ea575138fa575582fb44089320815d982cf483871791ee18b6849b9c3cfd52b661be2a256002c775768a14748b82ac664b59df92a76b426dce06b4a06eca0debc2d2b9d0523c76d3610596c256294e4931d784633e0d64c82dccdbd045679dd4895586ab18baecd87777f6e86f28b57d28249044cf7433ce8d63393f81dca7193111489ebe2e986afc6dbecd80d567d683db8e0286c96212502982a175e957159e8b9999c42496cb990f489976741711205b30a634ac9fee2197095643d37f7a5e3ee5f7b9f4ef57ad9c7d0e8505426900293137e66077e966b680dfc15331a142fa09e4a80ee6886fb2b3aeb293a0f41c9e67b4e42ea5c43702b068c2beffac4f43dfdd77deb7cc3f9ab0c192c0f680d607136c414e2a5a0b7684e0eb31d480a58954af2e97159fc862e7802fe1369ef030e57378ff48926824cb0808c7df39c2d124b6d3f0f49afe5c2ef93b52955df936307db721dc215148c6a9586ddd6cdebfbef4ec05bb7edc78e3048a273323f0160c51a957b97f1c78feb33dea666a76070be2d115d3f0c014c7685c7fe011aa88f3bae2032a7f8d028915d3c155988d4d7ec83f8b0b2b6850d48da236e00a5a5f2de663b36c9bb9bf0e46ae03546447bc2c79e76ca19739daa79768df911b22439dd68e507a64d98dd96b7aefbacc38a47b07ae8cadc22f2a60f9ff36632ceb9057c8af697170d5b60cccb09aad7fae62e97fbeca7aa02e8c3573259fce9fc2a84ce62ea33b08dad89e855240b31b5d2adc87ffe845698ef9cf2d95cd7047c28c1369bb7dc09cc872a40768f9871fa3d3f0bab7ab7a89b7f8e6eeafee6bf1c3c627ab4d80c1861c3bb3abdc6c0780b44a6f2bd50da3d8655adbe62ab50609606146d685da1d710277142001ddde94e11b3c6c5371cd300a31ec8935e951b2c4559ab34e1483a2f775b536336a6aa2e3635845f658d68b8524c4e03f220b876f11b1bcd6a45439f743211af4400a695fe10b46a0508ce312b0a77e6f64817d88d700fced1b3b2efb731a28730ff9c32d6be25c0527bb76d1985a5940e1c63da8c6a601d0119efdecb1ccd6e3574b01b885291bed45340b7f1e4f8341c7accddbde081e2b5db99c3737e37947a4192ddda7a006db1dfbe9a458e6248b94aab4448f61c3e877d2ac1f0ed99181c76fb242cb71bc78a1052f4f7b20579b08eea4be0b87d5e85c6fb28b6761a9acaf9abb35a2a49f8a054c0021ccfd456cd2eddd88c8b6b079ff67ae4eea3ac717ff36ab93b511756e9b7ae6d4eaf74401387bcfc4c78eb56c9c043655d539f45114231383e80b6ea443ae81ff266ef088c8c763d814e01067d37a28d44bcd1c4d1c8ee9462e059dc1912230b1da48ac412763fa806c32b59e5ad0a85b1063e568d6cef78593bad212c10cfc43c3db77a85321a34b2025c45f30a649795bad2e1a9679548b268fe68ddc3c074ec03f6f0cc361a661e56b8dce5ae0edca8d64fe87952bf4890857f08bcdf4f276dece4b59d9bf3c707b7e2f565582d4767dc361144561e358c096104f963901d68008d8c7e4f35b4399942025ea11dae55c47d0f248889c06a78a459f63fc9d3fc1db86487b4e5d638289d242c50d27d9bf514f8620ee4a086450b699bf68f6a71e18d0948847f938a71ecdf22e37425879f1603d89571fa2b5814660e625bb2e3cc3e8e3bc06e6daab9459ee65c9cabcb2d14b5c8f497cae483fb61d0babe083af31f8d25426ef4b8d048b78df0325a8c5fb4a8920bc4515bcd886266b8bdada479a98cfba88924c204609e695630371f8f90fe112f50506a4661c1d36bc2b6d3d3bec50261de9663ce3658ae115334a6fdb33af162dc0876c2b0cde5b3df39d720bd4620812b4cc8a04450bc6fcef669106415b529ceda852d7845611cc536dd1d60342db8309a9ffc16721ee9326b3a356ec2f13e6ace06db482665af591f835df88989e16637b0fc6b6a358ff34d5223a232b62a82c04038964f03dafb17fc0e4dde331d432d96928392d6b6b880580af9997043b89c4a963966ef75d87bd78d08c682c2e152a2a8a6aa2d099b12390e570987d773c897f4a1e5e3b66ea96b9f83e1d496dd14564f8b9b585b9facabd7749f70900b9a45c027226f3c5d80f9f0afc8204ef810ca47144"}, {0xb3, 0x0, "133cecadf2ce0c7b588eeb4c94166329e0e881d8a876ce19e7b5ceef975e90773a5a8909df0f64176cdaa5f6ad12c60e921b1c5a1211ad2db921c967ae039903015774aa31ff9747865d170718c240b34108ae957cf6e80dcd1736b4fd5a45af1afff19abc2f0f3038e54e435df5e1e7f21262b090b947914cfb83dc4647bf1e5d34671dc493a06cd3ff5183974b7612a36e94fceb9f19a78332dfba7212262f4221f82244142df3707978cf676c42"}, {0x82, 0x0, "8b5f7e2359c9898080d243e30549c2d5f1c934bdb4702acd9f6dd972fe172eece6dbdbbf12528de46b623faae8097f5e0b947536951b91781d7c6118e28e0cd13f023860c32af5a05e351d5101ff4886d92491368dead12b48e6d01c73fc20a8b4d9a9b80fb17d50155ed315fb2c451121252416599dd2d99b77e140a933"}, {0x5f, 0x0, "f21cf85284fad2ba8c09dca43c1758276a05404835f288dde09e9a272f33c44cb78e8f43ac6b1b3439ac51e9c18b81fd8d74ea346c7029c883eb075017b7a6964b139e703058914051c225c179dd5141b3bd59d9de1a39e5312a31"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8087b10719e5"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xd49}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x81}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x81}]}]}, 0x1290}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x136}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}}, 0x4008001) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000019c0)) r8 = semget(0x3, 0x0, 0x122) semop(r8, &(0x7f0000001a00)=[{0x0, 0x3, 0x800}, {0x2, 0x7fff, 0x1000}, {0x2, 0x1f, 0x1000}, {0x0, 0x1, 0x400}, {0x0, 0x7fff, 0x1000}, {0x1, 0xe2, 0x800}, {0x0, 0x1}, {0x0, 0x54b, 0x1800}], 0x8) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000001a40)=""/40) 15:11:38 executing program 6: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x101, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xae}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000240)=0x7c, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x3}}, 0x0, 0x0, 0x27, 0x0, "027cb1eea3419624589f60912f9e13171178e20aa4d5d44a37b4fe1f00cd2d159dc56e03b1a33151628db85d945c148f1104c1b56bd5ff3c6a0d652663231edc6307697a7efef107f991e891b299f02e"}, 0xd8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x677d, 0x15}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xbc, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x5}}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x6, 0x0, {0x80, 0x1, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x6, 0x7f}}, @dsss={0x3, 0x1, 0x9d}, @measure_req={0x26, 0x91, {0xdc, 0x34, 0x9, "4af8e254e9864952f0959ce8bc8b6cbc276a94e70fd21865e9e2273cb740f992884b694ed2989d4ca77a4b50e045f779252a5a21b77c14c158766b36098265965b627439cbbfe4c7481a930067bcbd263e70713e8d659427309db5f91a71a01c025f421000a8839a10485c0d5e55b0b45c8091ad3530ea85dbfdaeeb38a7f2928fb2ca337e6a55c741d1004e1a10"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8040}, 0x801) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f00000005c0)=0x7, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xd3, 0x4c}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041}, 0x1) getrandom(&(0x7f0000000700)=""/136, 0x88, 0x3) getrandom(&(0x7f00000007c0)=""/73, 0x49, 0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r5) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r6, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x200, 0x0, 0x96480d68f4da7a3b, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TESTDATA={0xeb, 0x45, "166f87188a7f14b08401b3d21dc8999e7cc43f66231377f6a3cd5c246962e72c62992c469265321bb2eaff412a979592e778a0b66a8722f2e41f70f9abeb228599741fc58ff79ec6bccfda2a9fef3d1842081ac5c305bd803bf5a09d31241a2c3e862b4c8b55c31fc297b1f354e27fdf9fb28a9ebebcfd19688cdfd033a3e2c132f46e56386a546fac665d7043fb89094dac0042d3eb56fb6f7b843f4c99733602aab0a1a9db3dd11b93c5e4772ffba9aa4f703307b1d560f1de77d72bf9f9173b80bec61262f79a4cfa8597d5d7ca5f7e3d8dfd6e432c5bed032102f27a2934f46de17e649d8e"}, @NL80211_ATTR_TESTDATA={0xf5, 0x45, "b7aaaec54d433600315f0ce7df746e51862040c30fa03afc85891d4e669019c5d6e7d04a215be736f488c70e2249cec96aab6379cd1a4311671c1c1d775cabc619f3900c6e1779894cc28e8edd306b553bb49a1ea7edd180c673563ea0164672967b350a861a6808f4fa02c0cb11f10233c7c77d365bc6b99c234d38e2d06b246f7cc4a9a8a85d28e1004bb75c90e74861f4366e350f1879eabb4fa1d43a8a0a07d0f2e8f101c2ddc399d951f4b1632713eba18e75864a74e76a233178c499866071107f27f94e24d00b4b37a599d5cbba8106b9fdbd4cec299f3c1467f0633ed86a950f27821f991c7802954804b560fa"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20}, 0x0) 15:11:38 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e96, 0x46}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008040}, 0x8004) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, r0, 0x726, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x37}}}}, [@NL80211_ATTR_IE={0x4}, @fils_params, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xc34e}], @NL80211_ATTR_IE={0x12f, 0x2a, [@challenge={0x10, 0x1, 0x6d}, @ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x1, 0x3d}, 0x1, 0xa7, @device_b, 0x10000, 0x5, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0xb1, 0x9}}, @tim={0x5, 0xde, {0x9, 0x29, 0x4, "7035acfcf1a4f9d5f4d789f9661cef527955715ee25aeaaaff73872116d23e23265a67b740a44e3e0f8c4c0d34869779d40e25e02c5137cd5cbf974c2e748ce5c00ad4b745882f81a00c4bc0795faa24de039a41447b58a1d1200699d87cb774db60b563b7374745dd5c4d8fbad6f1435eb8561272d3e584acc7b12001dd33d8810a7fd27f0ce8be1b5448183b9d371b2f4bef9dd5df416cfa41648d94266fbb5b9fa2af9a489c6a153c663f9de1218fcdf52241b234c3d7660393a0d34959ca403df1756561cdc87dba85c75a138ab36fe260834b193592d30ae4"}}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x7, 0x0, {0xffff, 0x5, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x8, 0x1f}}, @ibss={0x6, 0x2, 0x9}, @challenge={0x10, 0x1, 0x6b}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8080}, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000400)={0x9b0, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x9}}}}, [@NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x4e0, 0x11d, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x66}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x71, 0x9, 0x2, 0x1, 0x18, 0x4, 0x1b, 0x6c, 0x52, 0x16, 0x1, 0x48, 0x24, 0xc, 0x2, 0xb, 0x3, 0x60, 0x48, 0x24, 0x18, 0xb, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1ff, 0x2, 0x9, 0x7ff, 0x155, 0x1, 0x200]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0xa}, {0x6, 0xa}, {0x3, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x7}, {0x2, 0xa}, {0x5, 0x6}, {0x0, 0x7}, {0x5, 0x4}, {0x3}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x4}, {0x7, 0x1}, {0x5, 0xa}, {0x4, 0x2}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x3, 0x4}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x8}, {0x5}, {0x2, 0x2}, {0x1, 0xa}, {0x5, 0x4}, {0x1}, {0x0, 0x3}, {0x6}, {0x6, 0xa}, {0x4, 0x5}, {0x3, 0x3}, {0x3, 0x8}, {0x3, 0x3}, {0x5, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x2, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x12, 0x6c, 0x0, 0xc, 0x30, 0x9, 0x3, 0x5, 0x16, 0x16, 0x5, 0x18, 0x4, 0x18, 0x24, 0x48, 0x4b, 0xc, 0x16, 0x18, 0x6c, 0x24, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x52, 0xe3e457756004b93, 0x5, 0x6c, 0x2, 0x2, 0x60, 0x4, 0x16, 0xd, 0xb, 0x1, 0x12, 0x24, 0x1, 0x24, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb, 0x1, 0xff, 0x0, 0x5, 0x4, 0x9, 0x52]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf393, 0x400, 0x50, 0xffff, 0x1, 0xe4fe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0x1000, 0x80, 0x3ff, 0x8000, 0x2, 0x80]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x11, 0x5, 0x18, 0x18, 0xc, 0x48, 0xb, 0x5, 0x6c, 0x1b, 0x30, 0x12, 0x5, 0x4, 0xb, 0x48, 0x2, 0x2, 0x4, 0x60, 0x34, 0x24, 0x2, 0x30, 0x12, 0x24, 0xb, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x16, 0x30, 0x2, 0x5, 0x12, 0x16, 0x6c, 0x6, 0x6c, 0x36, 0x6c, 0x16, 0x73, 0x24, 0x0, 0x30, 0x6c, 0x16, 0x6c, 0x16, 0x6, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x2, 0x6, 0x48, 0x48, 0x6c, 0x48, 0x2, 0x4, 0x24, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x6c, 0x12, 0x6, 0x1b, 0x1b, 0x2, 0x60, 0x5, 0x1b, 0x48, 0xc, 0x1b, 0x0, 0x18, 0x16, 0x16, 0x11, 0x1b, 0x4]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x1, 0x8001, 0x9b3, 0x5, 0x1f, 0xfff8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{}, {0x0, 0x7}, {0x7, 0x6}, {0x5}, {0x5, 0x6}, {0x2, 0xa}, {0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x5}, {0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x2, 0x2}, {0x3, 0x2}, {0x7, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x6}, {0x6, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x5}, {0x1}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0x8}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x5}, {0x1}, {0x5, 0x7}, {0x3, 0x9}, {0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x3}, {0x4, 0x5}, {0x6}, {0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5220, 0x3, 0x8001, 0x7ff, 0x1, 0xfff, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x2}, {0x3, 0xa}, {0x2, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x9}, {0x4, 0xa}, {0x4, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x900000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x89}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x36, 0x12, 0xb, 0x36, 0x18, 0xb, 0x48, 0x48, 0x6c, 0xc, 0x6c, 0x6, 0x1, 0x57, 0x4, 0x48, 0x1b, 0x24, 0x1, 0x1b, 0x2, 0x1, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x9}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x4}, {0x1, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x1a, 0x30, 0xb, 0x5, 0x4, 0x16, 0x2, 0x24, 0x24, 0xd8, 0x18, 0x1b, 0x48, 0x60, 0x60, 0x1, 0xc, 0x36, 0x6c, 0x60, 0x5, 0x1, 0x4, 0x30, 0x36, 0x6, 0x4]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x38, 0x1, 0x3, 0x2, 0x6c, 0x2, 0x18, 0x0, 0x3, 0xb]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x7, 0x9}, {0x7, 0x4}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x48, 0x1b, 0x48, 0x36, 0x30, 0x16, 0x16, 0x3, 0x36, 0x48, 0x30, 0x6c, 0x18, 0xa]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x2, 0x9, 0x18, 0x5, 0x0, 0x10, 0x60, 0x1b, 0x18, 0x12, 0x16]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x7}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x1b, 0x41, 0x1, 0x60, 0x16, 0x6c]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x5, 0xc, 0x1, 0x5, 0x1, 0x2, 0x1, 0x60, 0xc, 0x48]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0xc, 0x4, 0x416a331836cb306a, 0x24, 0x4, 0x2, 0x36, 0x44, 0x28, 0x9, 0x1, 0x18, 0x24, 0x6c, 0x1, 0x4, 0x18, 0x2, 0x1, 0x1, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x97e, 0xae0, 0x3, 0x1000, 0x2, 0xa8, 0x200]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x6, 0x9, 0xc, 0x6, 0x24, 0x16, 0x16, 0x4, 0x18, 0x6, 0x5, 0xc, 0x1, 0x6c, 0x4, 0xcc4f515a6e6233f7, 0x48, 0x9, 0x4, 0x6, 0x4, 0x48, 0x0, 0x6c, 0x5, 0x4, 0x48, 0x9, 0x6, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x6}, {0x2, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x2, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x6, 0x7}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0xa}, {}, {0x0, 0x3}, {0x6, 0x3}, {0x7}, {0x1, 0x6}, {0x7, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x2}, {0x6, 0x9}, {0x7, 0x8}, {0x6, 0x9}, {0x6, 0x6}, {0x1, 0x8}, {0x7, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x1}, {0x3}, {0x6, 0x6}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x6, 0x6, 0x9, 0xc, 0x18, 0x5, 0x12, 0x3, 0x3, 0x3, 0x5, 0x5, 0x9, 0x60, 0x1b, 0x6c, 0x12, 0x1, 0x6, 0x2, 0x3, 0x30, 0x2, 0x2, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x46}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b0, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x25c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x11c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x1, 0x1ff, 0x77d, 0x80, 0x2b7, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x7, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x1}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x5}, {0x2, 0x9}, {0x4, 0x4}, {0x7, 0x2}, {0x7, 0xa}, {0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0x8}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x2}, {0x2, 0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x9, 0x8001, 0x71, 0x40, 0xfff7, 0x2]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x4}, {0x3}, {0x4, 0x9}, {0x6, 0x8}, {0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x4, 0x6}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0xa}, {0x1, 0x9}, {0x7}, {0x2, 0x1}, {0x6, 0x5}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x6, 0x5}, {0x4, 0x6}, {0x5, 0x4}, {0x7, 0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x6}, {0x2, 0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x3, 0x4}, {0x5, 0x7}, {0x2}, {0x4, 0x2}, {0x2, 0x7}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x7, 0x6}, {0x1}, {0x7}, {0x7}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x9}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x7}, {0x2, 0xb}, {0x2, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x3}, {0x4, 0x7}, {0x7}, {0x1}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x5}, {0x7}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x60, 0x12, 0x18, 0x24, 0x18, 0x6c, 0xc, 0x6, 0x16, 0x12, 0xc, 0x12, 0xc, 0x3, 0x2, 0xc, 0x36, 0x30, 0x48, 0x0, 0x3, 0x12]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x6}, {0x3, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x3}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x3, 0xa}, {0x4, 0x3}, {0x0, 0x1}, {0x3}, {0x1}, {0x4, 0x2}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x5}, {0x5, 0x3}, {0x5, 0x4}, {0x4, 0x4}, {}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0xa}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x7, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x6}, {0x5, 0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0x5}, {0x6, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x2, 0x7}, {0x4, 0x9}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x275e, 0x3f, 0xfc1b, 0x38d, 0x4, 0x8000, 0x100, 0x8001]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0xa}, {}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x6}, {0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x5}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x9}, {0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x3}, {0x4, 0x6}, {0x6, 0x7}, {0x4, 0x8}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x7, 0x1}, {0x5, 0x7}, {0x5, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x8}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0x3}, {0x3, 0x6}, {0x1, 0x8}, {0x5, 0x9}, {0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x3, 0x5}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x2}, {0x3}, {0x0, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x4, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x16, 0x1a, 0x48, 0x48, 0x6c, 0x2, 0x12, 0x1b, 0x3]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x36, 0x5, 0x24, 0x18, 0xb, 0x24, 0x36, 0x1, 0x6c, 0x18, 0x9, 0x3, 0x2, 0xc, 0x36, 0x3, 0x48, 0x4, 0x30, 0x1b, 0x16, 0x9, 0xc, 0x24, 0x18, 0x69]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x800}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}]}]}, @NL80211_ATTR_TID_CONFIG={0x190, 0x11d, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x2}, {0x7, 0x5}, {0x2, 0x4}, {0x1}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x5}, {0x7, 0x1}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0x9}, {0x7, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x6}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x5, 0x30, 0x60, 0x5, 0x36, 0x4, 0x4, 0x16, 0x6, 0x1, 0xb, 0x2, 0x18, 0xc, 0x1]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x9}, {0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x5}, {0x6, 0x3}, {0x7}, {0x1, 0x6}, {0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x2}, {0x6, 0x9}, {0x3}, {0x6, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {}, {0x2, 0x6}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x5}, {0x3, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x3, 0x3}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x16, 0x2, 0x1b, 0x3, 0x36, 0x9, 0x12, 0x12, 0xc, 0x30, 0x16, 0x6c, 0x36, 0x2e]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x1, 0x48, 0x4, 0x36, 0x5, 0x50, 0x9, 0x5, 0x2, 0x18, 0x18, 0x3, 0x3, 0x6, 0x1, 0x3, 0x3, 0x2e, 0x4, 0x6, 0x36, 0x1, 0x48, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb, 0xa9cf, 0x1, 0x2, 0x70, 0x6, 0x40, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x5, 0xa}, {}, {0x7, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x3, 0xa}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x4}, {0x6}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x60}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}]}]}]}, 0x9b0}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xef, 0x7a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38a}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0xc900}, 0x90) r5 = memfd_secret(0x80000) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001040), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, r6, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x881}, 0x4000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r8, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r1, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x6c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40864}, 0x844) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20040202}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x1fc, r0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0xa}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be8fc6f12aae6730d0baab96127d4794"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x710}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9ce3930eecca2532ae44643d1d9fa79db6f3f0131cbf4aa6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="80d2c734088149a43aa6479022ed028c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "955dabe1d443df20"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="81de224bb44cdd897edc86fae4d63414"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "279679b540b511e8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3c1cd5c6abde86c1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "27bf36c52bc0c56e"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "402914b7708f4da2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ca9cb4bb45f31fb9f0224b1531cfb7ee"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="48e9472f7ef0355507e0ca0afad104198dee66424f928884fd57d4395f34f8fd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="789ebfa929482b75244aaf66280943cc77d49c512c06cc1245bd976727a7551a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x221}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9070dcdb00b74f68"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="29904d174fbe30c732827c204342396b9cc046f91ac08108"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d472418c9ac65af4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="456547938c8cca845731c6f0930b29e9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7309f11123b7e4d92dd9141cfa712ebd"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c674fede7b9e7ae9e1786dd19b127de6b74b9042b73640b36b4b3576812382dd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x810}, 0x20000840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x132}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r0, 0x4, 0x70bd2d, 0x1, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1db5225e01fbc24f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 15:11:38 executing program 7: sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c8}, 0x4001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4040002) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x20}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}}, 0x20000010) r5 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r5, 0xb) r6 = memfd_secret(0x80000) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x10be}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1a1d}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6f}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xb8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000884) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6b}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0xd47740332882c787}, 0x4040800) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x0, 0x100, 0x8, 0x1f4e, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000040}, 0x40) [ 94.658779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.664094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.666296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.673429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.684016] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.687017] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.704704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.706177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.709923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.711158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.713015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.714131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.716874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.718371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.720146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.721375] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.726928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.731885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.773864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.788258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.794810] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.798988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.800386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.801406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.806230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.849751] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.859475] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.889417] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.895635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.900420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.901268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.925409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.927231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.938813] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.938946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.944036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.957968] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.957998] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.959850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.972011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.975997] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.985758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.989700] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.990712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.027828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.028861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.054844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.118162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.740077] Bluetooth: hci2: command tx timeout [ 96.740977] Bluetooth: hci0: command tx timeout [ 96.867667] Bluetooth: hci3: command tx timeout [ 96.931597] Bluetooth: hci1: command tx timeout [ 97.123752] Bluetooth: hci5: command tx timeout [ 97.124428] Bluetooth: hci7: command tx timeout [ 97.124491] Bluetooth: hci4: command tx timeout [ 97.251580] Bluetooth: hci6: command tx timeout [ 98.789640] Bluetooth: hci0: command tx timeout [ 98.790172] Bluetooth: hci2: command tx timeout [ 98.917555] Bluetooth: hci3: command tx timeout [ 98.979626] Bluetooth: hci1: command tx timeout [ 99.171646] Bluetooth: hci4: command tx timeout [ 99.173636] Bluetooth: hci5: command tx timeout [ 99.173665] Bluetooth: hci7: command tx timeout [ 99.305775] Bluetooth: hci6: command tx timeout [ 100.839908] Bluetooth: hci2: command tx timeout [ 100.840716] Bluetooth: hci0: command tx timeout [ 100.963632] Bluetooth: hci3: command tx timeout [ 101.027730] Bluetooth: hci1: command tx timeout [ 101.223684] Bluetooth: hci5: command tx timeout [ 101.224224] Bluetooth: hci4: command tx timeout [ 101.225015] Bluetooth: hci7: command tx timeout [ 101.351711] Bluetooth: hci6: command tx timeout [ 102.884345] Bluetooth: hci0: command tx timeout [ 102.884919] Bluetooth: hci2: command tx timeout [ 103.012173] Bluetooth: hci3: command tx timeout [ 103.076392] Bluetooth: hci1: command tx timeout [ 103.267654] Bluetooth: hci7: command tx timeout [ 103.268211] Bluetooth: hci4: command tx timeout [ 103.268765] Bluetooth: hci5: command tx timeout [ 103.396555] Bluetooth: hci6: command tx timeout [ 154.978512] syz-executor.1 (281) used greatest stack depth: 23248 bytes left [ 157.475124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.476915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.478779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.482590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.489811] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.490934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.578124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.581695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.583444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.585807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.586899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.593712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.596760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.597748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.604333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.605969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.607121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.614421] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.689125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.691129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.695818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.699652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.707958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.709777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.727834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.729363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.736988] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.738432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.739382] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.741377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.843415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.850599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.860989] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.871245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.891418] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.893339] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.897618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.899248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.903626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.904462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.912380] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.929452] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.932891] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.971212] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.980743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.989900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.000607] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.002647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.523590] Bluetooth: hci0: command tx timeout [ 159.651687] Bluetooth: hci1: command tx timeout [ 159.651693] Bluetooth: hci2: command tx timeout [ 159.779604] Bluetooth: hci4: command tx timeout [ 159.844079] Bluetooth: hci3: command tx timeout [ 160.163662] Bluetooth: hci5: command tx timeout [ 160.229621] Bluetooth: hci6: command tx timeout [ 160.291631] Bluetooth: hci7: command tx timeout [ 161.573593] Bluetooth: hci0: command tx timeout [ 161.699730] Bluetooth: hci2: command tx timeout [ 161.700587] Bluetooth: hci1: command tx timeout [ 161.827601] Bluetooth: hci4: command tx timeout [ 161.902961] Bluetooth: hci3: command tx timeout [ 162.219573] Bluetooth: hci5: command tx timeout [ 162.275581] Bluetooth: hci6: command tx timeout [ 162.339623] Bluetooth: hci7: command tx timeout [ 163.619788] Bluetooth: hci0: command tx timeout [ 163.747580] Bluetooth: hci1: command tx timeout [ 163.747640] Bluetooth: hci2: command tx timeout [ 163.877575] Bluetooth: hci4: command tx timeout [ 163.939724] Bluetooth: hci3: command tx timeout [ 164.271539] Bluetooth: hci5: command tx timeout [ 164.325548] Bluetooth: hci6: command tx timeout [ 164.410429] Bluetooth: hci7: command tx timeout [ 165.677545] Bluetooth: hci0: command tx timeout [ 165.795569] Bluetooth: hci2: command tx timeout [ 165.796874] Bluetooth: hci1: command tx timeout [ 165.923590] Bluetooth: hci4: command tx timeout [ 166.010515] Bluetooth: hci3: command tx timeout [ 166.307792] Bluetooth: hci5: command tx timeout [ 166.371595] Bluetooth: hci6: command tx timeout [ 166.435752] Bluetooth: hci7: command tx timeout [ 219.823776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.828663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.829625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.832395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.833596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.840269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.841973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.845526] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.846253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.847622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.849977] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.854028] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.888535] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.891048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.901912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.906805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.914871] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.920950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.954595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.958028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.961752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.992014] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.996264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.997611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.011076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.015652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.021958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.059396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.071336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.075787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.223360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.234128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.279794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.290880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.298541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.318813] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.323138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.329007] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.340600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.356208] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.370130] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.371747] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.380206] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.381530] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.420454] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.425518] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.427750] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.451602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.923663] Bluetooth: hci1: command tx timeout [ 221.929601] Bluetooth: hci0: command tx timeout [ 221.987655] Bluetooth: hci2: command tx timeout [ 222.051619] Bluetooth: hci3: command tx timeout [ 222.179871] Bluetooth: hci4: command tx timeout [ 222.499672] Bluetooth: hci5: command tx timeout [ 222.563635] Bluetooth: hci7: command tx timeout [ 222.565837] Bluetooth: hci6: command tx timeout [ 223.971985] Bluetooth: hci0: command tx timeout [ 223.972548] Bluetooth: hci1: command tx timeout [ 224.043515] Bluetooth: hci2: command tx timeout [ 224.100341] Bluetooth: hci3: command tx timeout [ 224.259523] Bluetooth: hci4: command tx timeout [ 224.547802] Bluetooth: hci5: command tx timeout [ 224.611658] Bluetooth: hci6: command tx timeout [ 224.611761] Bluetooth: hci7: command tx timeout [ 226.019933] Bluetooth: hci1: command tx timeout [ 226.020441] Bluetooth: hci0: command tx timeout [ 226.083617] Bluetooth: hci2: command tx timeout [ 226.148695] Bluetooth: hci3: command tx timeout [ 226.281864] Bluetooth: hci4: command tx timeout [ 226.596577] Bluetooth: hci5: command tx timeout [ 226.659894] Bluetooth: hci7: command tx timeout [ 226.660443] Bluetooth: hci6: command tx timeout [ 228.067722] Bluetooth: hci0: command tx timeout [ 228.068714] Bluetooth: hci1: command tx timeout [ 228.136203] Bluetooth: hci2: command tx timeout [ 228.198545] Bluetooth: hci3: command tx timeout [ 228.323634] Bluetooth: hci4: command tx timeout [ 228.643693] Bluetooth: hci5: command tx timeout [ 228.708676] Bluetooth: hci6: command tx timeout [ 228.709412] Bluetooth: hci7: command tx timeout [ 282.044191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.049403] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.058043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.063863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.069952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.077907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.107116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.111960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.152551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.173923] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.185926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.187368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.189032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.190030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.191299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.284943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.305005] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.306066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.337134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.345714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.357907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.358803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.360051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.369822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.376051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.377314] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.382329] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.383347] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.386877] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.426015] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.444957] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.449711] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.451036] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.454999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.459920] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.477004] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.508129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.509504] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.532856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.537754] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.539571] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.566885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.568338] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.582192] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.601985] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.649672] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.664159] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.746106] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.133865] Bluetooth: hci0: command tx timeout [ 284.323947] Bluetooth: hci1: command tx timeout [ 284.387655] Bluetooth: hci2: command tx timeout [ 284.579584] Bluetooth: hci5: command tx timeout [ 284.580615] Bluetooth: hci3: command tx timeout [ 284.643599] Bluetooth: hci6: command tx timeout [ 284.644325] Bluetooth: hci4: command tx timeout [ 284.835654] Bluetooth: hci7: command tx timeout [ 286.181516] Bluetooth: hci0: command tx timeout [ 286.371518] Bluetooth: hci1: command tx timeout [ 286.447506] Bluetooth: hci2: command tx timeout [ 286.628621] Bluetooth: hci5: command tx timeout [ 286.629159] Bluetooth: hci3: command tx timeout [ 286.691560] Bluetooth: hci4: command tx timeout [ 286.692112] Bluetooth: hci6: command tx timeout [ 286.883577] Bluetooth: hci7: command tx timeout [ 288.228540] Bluetooth: hci0: command tx timeout [ 288.421488] Bluetooth: hci1: command tx timeout [ 288.484557] Bluetooth: hci2: command tx timeout [ 288.676627] Bluetooth: hci3: command tx timeout [ 288.677183] Bluetooth: hci5: command tx timeout [ 288.740701] Bluetooth: hci6: command tx timeout [ 288.741204] Bluetooth: hci4: command tx timeout [ 288.932542] Bluetooth: hci7: command tx timeout [ 290.280486] Bluetooth: hci0: command tx timeout [ 290.467552] Bluetooth: hci1: command tx timeout [ 290.531513] Bluetooth: hci2: command tx timeout [ 290.724607] Bluetooth: hci5: command tx timeout [ 290.726062] Bluetooth: hci3: command tx timeout [ 290.787580] Bluetooth: hci4: command tx timeout [ 290.788980] Bluetooth: hci6: command tx timeout [ 290.980547] Bluetooth: hci7: command tx timeout [ 306.203641] hrtimer: interrupt took 6236149 ns [ 345.052371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.136186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.137489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.138332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.140578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.141639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.142963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.147954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.150205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.156924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.158422] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.159473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.172460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.173629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.174714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.177099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.179166] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.180268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.204198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.205029] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.206289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.231575] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.234309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.237237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.237887] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.238197] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.239688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.241900] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.244709] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.245906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.259646] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.265296] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.266365] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.252069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.269019] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.270686] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.273506] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.274867] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.275941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.292234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.293630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.294653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.297351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.307833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.312204] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.313370] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.345724] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.368660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.235605] Bluetooth: hci2: command tx timeout [ 347.299549] Bluetooth: hci7: command tx timeout [ 347.299578] Bluetooth: hci4: command tx timeout [ 347.363867] Bluetooth: hci3: command tx timeout [ 347.363885] Bluetooth: hci1: command tx timeout [ 347.364645] Bluetooth: hci6: command tx timeout [ 347.365120] Bluetooth: hci0: command tx timeout [ 347.491554] Bluetooth: hci5: command tx timeout [ 349.313663] Bluetooth: hci2: command tx timeout [ 349.347533] Bluetooth: hci4: command tx timeout [ 349.349395] Bluetooth: hci7: command tx timeout [ 349.430311] Bluetooth: hci3: command tx timeout [ 349.430594] Bluetooth: hci6: command tx timeout [ 349.430863] Bluetooth: hci1: command tx timeout [ 349.431271] Bluetooth: hci0: command tx timeout [ 349.564490] Bluetooth: hci5: command tx timeout [ 351.331615] Bluetooth: hci2: command tx timeout [ 351.396542] Bluetooth: hci7: command tx timeout [ 351.397063] Bluetooth: hci4: command tx timeout [ 351.460041] Bluetooth: hci6: command tx timeout [ 351.460622] Bluetooth: hci0: command tx timeout [ 351.461143] Bluetooth: hci1: command tx timeout [ 351.461696] Bluetooth: hci3: command tx timeout [ 351.589505] Bluetooth: hci5: command tx timeout [ 353.380350] Bluetooth: hci2: command tx timeout [ 353.443564] Bluetooth: hci4: command tx timeout [ 353.444144] Bluetooth: hci7: command tx timeout [ 353.507867] Bluetooth: hci1: command tx timeout [ 353.508380] Bluetooth: hci3: command tx timeout [ 353.509271] Bluetooth: hci0: command tx timeout [ 353.509801] Bluetooth: hci6: command tx timeout [ 353.635545] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 15:16:48 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806ce09b40 RCX=ffffffff8684c101 RDX=1ffff1100d9c1368 RSI=ffffffff81ab9c08 RDI=ffff88806ce09b4c RBP=0000000000000003 RSP=ffff88806ce09a58 R8 =ffffffff8684c18c R9 =ffff88806ce09ab8 R10=000000000003ab8c R11=000000000002431c R12=ffff88806ce09b40 R13=0000000000000000 R14=ffff888034701bc0 R15=ffff88800f23a000 RIP=ffffffff815ec70f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa53b46e540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f1d709c2b0 CR3=000000000dc14000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81b316e0 RBX=0000000000000001 RCX=ffffffff86859844 RDX=dffffc0000000000 RSI=ffff88803492feb8 RDI=1ffff11006925ec8 RBP=ffff88803492f640 RSP=ffff88803492f578 R8 =ffffffff86859848 R9 =ffff88803492f628 R10=000000000003ab8c R11=00000000000266f0 R12=ffff88803492f648 R13=ffff88803492f630 R14=ffff88803492fec0 R15=ffff88803492f5e8 RIP=ffffffff813498e9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f877454bb80 CR3=0000000025cd2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00000000000000ff00000000000000 XMM02=0000000000000000ff00000000000000 XMM03=00000000000000000000ff0000000000 XMM04=00000000000000ff0000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000