Warning: Permanently added '[localhost]:61005' (ECDSA) to the list of known hosts.
2025/01/30 11:14:36 fuzzer started
2025/01/30 11:14:37 dialing manager at localhost:36977
syzkaller login: [   84.694636] cgroup: Unknown subsys name 'net'
[   84.832442] cgroup: Unknown subsys name 'cpuset'
[   84.858260] cgroup: Unknown subsys name 'rlimit'
2025/01/30 11:14:54 syscalls: 204
2025/01/30 11:14:54 code coverage: enabled
2025/01/30 11:14:54 comparison tracing: enabled
2025/01/30 11:14:54 extra coverage: enabled
2025/01/30 11:14:54 setuid sandbox: enabled
2025/01/30 11:14:54 namespace sandbox: enabled
2025/01/30 11:14:54 Android sandbox: enabled
2025/01/30 11:14:54 fault injection: enabled
2025/01/30 11:14:54 leak checking: enabled
2025/01/30 11:14:54 net packet injection: enabled
2025/01/30 11:14:54 net device setup: enabled
2025/01/30 11:14:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/30 11:14:54 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/30 11:14:54 USB emulation: enabled
2025/01/30 11:14:54 hci packet injection: enabled
2025/01/30 11:14:54 wifi device emulation: enabled
2025/01/30 11:14:54 802.15.4 emulation: enabled
2025/01/30 11:14:54 fetching corpus: 0, signal 0/0 (executing program)
2025/01/30 11:14:56 starting 8 fuzzer processes
11:14:56 executing program 0:
r0 = syz_io_uring_complete(0x0)
openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x464, 0x94e64ee9589ef48c, 0x70bd27, 0x25dfdbfe, "14f4cf97edcd097797d5e9a9ebe318c57b35f1f71a91ea3e081f730c3b524ae5ece9c82fdea0802cabb3f3fd1d4bbe67aad5831521d821695c1eeb2868fb6f5b4a92af6e17caf63bda5902a2cdc424535e5588ce62d5a6faf4687ed2212c515e", ["", "", "", "", "", "", "", ""]}, 0x70}}, 0x1)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x174, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xd, 0x2a, [@supported_rates={0x1, 0x7, [{0x5, 0x1}, {0x48, 0x1}, {0x16}, {0x18}, {0x4}, {0xffa12906b51ba261, 0x1}, {0xc}]}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0xfc45, 0x7}}, @mic={0x8c, 0x10, {0x799, "c34ce8957aa3", @short="4999706059004c4e"}}, @measure_req={0x26, 0x91, {0x0, 0x0, 0xf, "5e2168b9bb447548bf458b854ae25f1d52d93eeb33ad93adc36826067f61e88318ce8fe9d0b6ec1ae5b99d5c11f04ac56d9d1d1a863011979d27813b4b3804889ef01d5d89f8229c57843c58d0f3cd9f431e9c7234016fd43459fbe3ad12b667b59337e77d2026d7d70b092d93c86576a0b1410079c494e51b34079a654588a0255f70cb2728bfceec38dc9c3f09"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x57, 0x2a, [@preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0x4, 0xce, 0x8, @broadcast, 0xff, "", 0x5, 0xbe, 0x5, [{{0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x28b}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x400}]}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x48000}, 0x810)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x800)
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x3f2, 0x200, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x840}, 0x4804)
r1 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x1)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xbc, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x4}, {0x5a, 0x4}, {0x7, 0x1}, {0x3, 0x5}, {0x9, 0x3}, {0x5, 0x3}, {0xc0, 0x2}, {0x8a, 0x6}, {0x80, 0x4}, {0x9, 0x1}, {0x9, 0x6}, {0xf7, 0x5}, {0x57}, {0x81, 0x5}, {0x5, 0x3}, {0x4, 0x2}, {0x7, 0x6}, {0x14, 0x2}, {0x0, 0x4}, {0xfa, 0x4}, {0x2}], "fd6c0f2d7135bd53"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x4, 0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x3f}, {0x3f, 0x5}, {0x1, 0x7}, {0xff, 0x2}, {0x6, 0x1}, {0x80, 0x1}, {0x9, 0x5}, {0x6, 0x7}], "72042594b1a0b852"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x4, 0x6}, {0x3, 0x4}, {0x9, 0x2}, {0x80, 0x5}, {0x3, 0x2}, {0xf9, 0x2}, {0x80, 0x3}, {0x7b, 0x4}, {0x0, 0x5}, {0x1f, 0x4}, {0x4}, {0x5, 0x1}, {0x20, 0x1}], "db1c135af879bcb7"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x0, 0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0xd5, 0x5}, {0x8, 0x1}], "daa4dba1ed4fe228"}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x22000010)
statx(r0, &(0x7f0000000840)='./file0\x00', 0x800, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
sendmsg$AUDIT_TRIM(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8810}, 0x8801)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x3fa, 0x6, 0x70bd27, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1804}, 0x18)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd8, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x1, 0x7ec0, 0x7f, 0x3f, 0x0, 0x7, 0x30000, 0x5a, 0x3f, 0x5320]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x326}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}]}, 0xd8}}, 0x48804)
sendmsg$AUDIT_USER(r1, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x90, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "41fe2db9686cc1eca70d6945fdc85c7d8b0b0d358ecbd61249d0c262494cb5ed169b91a72f5c7d14af0cf70eb5cdaba21f1985c0a0c9a77722f9704684a5272994e9567400b06084218c6fc01c588a1440ef7aa17ae801b9d877baabdb3edd117c6ea5512db6778e4722d002442878fb6e232ded7b104cdff5ee274bfe30", ["", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x880)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, <r4=>r1, {r2, r3}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f80)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x6c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001080))
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001300)={0x6b4, 0x0, 0x2, 0xd78, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x638, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x328, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1ec, 0xd, 0x0, 0x1, [{0xbc, 0x0, "0db174d568faa96aa01199ba4f04127228357b1ad5e5b38c71fa619aa3c6b702c17bb41730460e781733b20017ce68dd427e1b8bb5b71a32d00698e695b1a5d829522f7e3485a41612bf428ddd5db953a066298d34e2fe4dac82fecc557a0833b6b9216ebea73e64cf4d6cb2584cead795ee4f08773fbb9731ce542908aa282d38df1b082695a18f24303d708bab5b5d1a4a59debc661513e5d96b1c3067ca6a942f1aaa85f07fe8e0baf003ef54fdd4c4fd70d5b233740f"}, {0x3f, 0x0, "d8b56fe198680d3a1a24c0d14aca572924d52e1b81d55f4c2faaf0a39ef8968de933732180245b31f72421bb46ba5f3e5a464e37f677d25f58976f"}, {0x6, 0x0, "9084"}, {0xe1, 0x0, "a88754f397e0735879bb8c0626c0bc8d655908c13ba9eb9664213781b29ddcfe29038e3dc12b11a353cd18ebd35d8a887e31cf8e089e7a701363b9338f3293522e33a1b8ce4f2b070c3f050d3d7a70c0411bb724f8b6522bb9aef0dbdd870dfbd29315a3ed70ea389403872a336946188f6d8546c31103b7277081bb9fe593d09106f20dda108048e087c17fbcdf42b88f26a078b88deaaff3fb991691e17944c3b3e1bae9bfbfc93b507ca069d2a53c1a0c82961b1ca3afe120e53e0af554ca9796d1c0b29a07ef8bb014b5dc3e6e3974d9e5df9cd2220a3cf308e997"}]}]}, @NL80211_ATTR_NAN_FUNC={0x68, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x64, 0xe, 0x0, 0x1, [{0x18, 0x0, "f6c225969bfd2e3f60cf702f02c030b8af6748ac"}, {0x47, 0x0, "068b3127b55da14c08884c22cd8fedb9b4986576d41d20bc0122575ba211d3911aeed880192b7be9d576bc383ec7b53a71609cc67307bbd2e100a705fed2821dffecc7"}]}]}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x4044000}, 0x1)

11:14:56 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x90)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x34, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x40}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xfff9}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x2}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r0, {<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x782}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4c800)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$AUDIT_TRIM(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x48000)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x68}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x214, r5, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xda, 0x32}}}}, [@NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffff7f}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4a2785ff3f715d21d3d6636cc253776f"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a5f589bcc388dd143056e34e874e2548a1e12f967ffd135d2e7fa251cbaccb89"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "03ab24917050fb0a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e8e4e2375b7e23845873cec081e28046"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="043ab7e230b26cf215d01be3bf7a8bb9"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc3a}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7af6ffc4bfbc8d57"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4142c1f4b640c770efd77bf4e1b96d85"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5f23be77a6dbc18c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b226386b8ad985dacb11bad3ca031bbbfcc1d5e594cdb68f"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e360e46160f94abf"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a91004d2ec1df65c5a6d06f0f8c08bd0177384b4f6ecc856"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1f}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2fb8}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="032ee2688f5b346688a5397d2aad62a8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "caeadcbc4d440f38"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "be481543ca0484e2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "40d48fac9d1eb5fb"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "94f2afdc77fb7318"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c5ac9e18e0d31a0a1251e20a7e46a66d"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="07e6ff96f049b1144a713486f7357720"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a5af69620985c31d64a5786fb0344a63356728c882a63a5c5f9944357bc2609b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b93dd56d0ed732623dc49222f83af021567956b8f802adb89ec8b4155f80c35e"}]}]}, 0x214}}, 0x20000000)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000001)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000d80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x278, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_HIDDEN_SSID={0x8}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1afd211376731c76}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x28}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x278}, 0x1, 0x0, 0x0, 0x44045}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, <r7=>r2, {r3, r4}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r2)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x8000)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x3f8, 0x1, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}}, 0xd82a7c37b97fa9ff)
sendmsg$AUDIT_DEL_RULE(r9, &(0x7f0000001540)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x208810c}, 0xc, &(0x7f0000001500)={&(0x7f0000001080)={0x444, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbff, {0x1, 0x1, 0x3c, [0x6, 0xfffffffe, 0xe5, 0x27, 0x7ff, 0xffff8000, 0x81, 0x80000000, 0x4c, 0x9ea6, 0xffff, 0x6, 0x8, 0x2c6e8ed7, 0x80, 0x6, 0x3f, 0xfffff670, 0x105, 0xa4ea, 0x86, 0x80000000, 0x39a, 0x0, 0x2, 0xd46f, 0x9d, 0x2, 0x10001, 0x47, 0x1dc6, 0x40, 0x5f42, 0x3, 0x8, 0x9, 0x8, 0x2, 0x3f, 0x101, 0x1, 0x1f, 0x5, 0x1, 0x81, 0x0, 0x6, 0x5d, 0x0, 0x8000, 0x6, 0x8, 0x1a6, 0xfffff178, 0x5, 0x3, 0x9, 0x1, 0x0, 0x4, 0x1416, 0x1ff, 0x41, 0xacf], [0x2, 0x3, 0x2, 0x0, 0x8, 0x9d, 0x400, 0x8, 0x1f, 0x9, 0xe66, 0xc4, 0x5, 0x4, 0x6, 0xe78, 0x80000001, 0x401, 0x4800, 0x61d, 0x5, 0x8, 0x0, 0x4, 0x2, 0x9, 0x1, 0x9, 0x91, 0x2, 0x1, 0x7, 0x80000000, 0x2, 0x2, 0x4, 0x0, 0x9, 0x0, 0x5, 0x80000001, 0x2, 0x9, 0xc8f9, 0xae41, 0x0, 0x2, 0x40, 0x7ff, 0x0, 0x80000000, 0x0, 0xffffff0f, 0x4, 0x1, 0x8, 0x5, 0x7, 0x3, 0x9, 0x86, 0x0, 0x800, 0x7], [0x1ff80, 0x9fe, 0x5, 0x5, 0x7, 0x6eee, 0x3ff, 0x10001, 0x429, 0x840e, 0xffffffff, 0xb35a, 0x3, 0xb, 0x2, 0x8, 0xc29, 0x5, 0x81, 0xfffffff8, 0x6, 0x6e0d, 0x80000000, 0x3e, 0x0, 0xffffffff, 0x5, 0x8, 0x3, 0x0, 0x1, 0x3, 0x6, 0x0, 0x1, 0x7fffffff, 0x10000, 0x4a6, 0x101, 0x3, 0x1000, 0x8, 0xb8, 0x8001, 0xb0, 0x5, 0xb95, 0x10000, 0x4, 0x7, 0x8001, 0x200, 0xd3f, 0x5, 0x47, 0x7, 0x9, 0x3f, 0x5, 0x61d66cd7, 0x8baf, 0xffff0000, 0x7], [0x1, 0xffffff7f, 0x2ab4, 0x2, 0x1, 0x8, 0x9, 0x7, 0x3, 0xfffffc00, 0x4, 0x2, 0x2, 0x0, 0x6c4f3b8, 0xfff, 0xfff, 0x0, 0x0, 0x1800000, 0x5, 0x515, 0x3, 0x9a0, 0x67e, 0x80000000, 0x0, 0x4, 0x5c8, 0x40, 0x7fffffff, 0x0, 0xf6, 0x3918, 0xf48, 0x3, 0x10000, 0x0, 0x5, 0x6694, 0x200, 0x7fffffff, 0xfffffd3a, 0x4c17, 0x6, 0x5, 0x200, 0x401, 0x20, 0x3, 0x8, 0x0, 0x5, 0xf3, 0x7, 0x7fffffff, 0x1f, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x2, 0x3], 0x22, ['\xff\xff\xff\xff\xff\xff', '!:%:^\x00', '\xff\xff\xff\xff\xff\xff', 'nl80211\x00', 'nl80211\x00']}, [""]}, 0x444}, 0x1, 0x0, 0x0, 0x28004000}, 0x4000000)

11:14:56 executing program 2:
r0 = syz_io_uring_complete(0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10010}, 0x4004000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1060200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x19}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x170, r7, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x2, 0x2}], "1bb7c384ab211da4"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x0, 0x7}, {0x8, 0x3}, {0x4, 0x6}, {0x1, 0x6}], "8361c32afb29985f"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x0, 0x3}, {0x2, 0x2}, {0xff, 0x7}, {0x7, 0x5}, {0x8, 0x7}, {0x2b}, {0xa7, 0x3}, {0x5, 0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0x2}, {0x40, 0x5}, {0x0, 0x1}, {0x18, 0x1}, {0x3, 0x4}, {0x20, 0x1}], "cb8d0d7bb4988925"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "1938748b76bcf638"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x1}, {0x0, 0x7}, {0x1, 0x1}, {0x40, 0x4}, {0x6, 0x6}, {0x5d, 0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x6, 0x3}, {0x40, 0x5}, {0x3}], "9048b09d4e51f854"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x1, 0x3}, {0x3d, 0x2}, {0x81, 0x2}, {0x4, 0x3}, {0x45}, {0x2, 0x4}, {0x6, 0x3}, {0x3a, 0x5}, {0xc4, 0x5}, {0x40}, {0x1f, 0x6}, {0x2, 0x4}, {0xfb, 0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x8, 0x7}], "da0bdffa826e90d3"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x0, 0x2}, {0x3f, 0x2}, {0x2, 0x3}, {0x48, 0x4}, {0x5, 0x2}, {0x1f}, {0xff}, {0x4, 0x4}, {0x1, 0x1}, {0x2, 0x5}, {0x4c}, {0x3, 0x3}, {0x3, 0x6}, {0x1}], "50c5fd26e80e3caf"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xc0, 0x3}, {0x3, 0x1}, {0x80, 0x3}], "4328f4bc14220749"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x9, 0x6}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0x5}, {0x81, 0x7}, {0x3f}, {0xe7, 0x6}, {0x8, 0x4}, {0x6, 0x3}, {0x40, 0x7}, {0xf2, 0x1}, {0x3, 0x4}], "e647353427ab351c"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x9, 0x4}, {0x1}, {0x6, 0x5}, {0x8, 0x4}, {0x5, 0x6}, {0x81, 0x5}, {0x40, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x8, 0x6}, {0xff}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x7}, {0xff, 0x7}, {0x7f, 0x2}, {0x80, 0x4}, {0x75}], "56165ce9637c2a14"}}]}, 0x170}, 0x1, 0x0, 0x0, 0x24000801}, 0xd0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x210, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x200088b0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r10=>0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r10, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000090)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x1)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r11, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc17, 0x36}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_PRIVACY={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000140}, 0x8800)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x772d51a4, 0x20}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x60000801)

11:14:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0x100, 0xfffffffb, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9af, 0x49}}}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x5}, {0x6, 0x7}, {0xff, 0x4}, {0x9, 0x2}, {0x4, 0x6}, {0x95}, {0x33, 0x7}, {0xff, 0x1}, {0x1, 0x3}, {0x6, 0x3}, {0x1, 0x6}, {0x80}, {0x4, 0x1}, {0x7, 0x5}, {0x6, 0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x4}], "df92b9e28cdbfbc3"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x1, 0x2}, {0x3f, 0x8}, {0x0, 0x7}, {0x40, 0x5}, {0xff, 0x4}, {0x5, 0x7}, {0xaa}, {0x2a, 0x1}, {0x7, 0x3}, {0xff, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x13, 0x1}, {0x1, 0x3}, {0x8}], "a5cc9e6f09921c12"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0xc0)
statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4000, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/123, 0x7b, 0x1, &(0x7f0000000480)}, &(0x7f0000000500)=0x40)
r4 = semget(0x2, 0x2, 0x212)
semctl$GETNCNT(r4, 0x0, 0xe, &(0x7f0000000540)=""/171)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x702, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044050}, 0x20004821)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x100010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r0, 0x1f, {0x0, r0}, 0x0, 0x4, 0x1, {0x0, 0x0, r0}}, 0x401)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r7=>r0, {r2, r3}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40080022}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6c}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x11)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x480c1)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r7)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r9, 0x500, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x55}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xfb}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20048880)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x85d}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x34, 0x33, @deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_b, @random="d48690356674", {0x7, 0x4}}, @ver_80211n={0x0, 0x32e, 0x2, 0x1, 0x0, 0x2}}, 0xc, @val={0x8c, 0x10, {0xd4b, "a91ec0e232c6", @short="217add49c2b17db4"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)

11:14:56 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x44100, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a0480, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x9)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_WIPHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008005)
r4 = syz_io_uring_complete(0x0)
openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000280), 0x2, 0x0)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x508400, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000300)={0x6000000c})
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0)
read$snapshot(r6, &(0x7f0000000380)=""/51, 0x33)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10010, r6, 0x8000000)
read$rfkill(r6, &(0x7f00000003c0), 0x8)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r3, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044000}, 0x14)

[  103.480684] audit: type=1400 audit(1738235696.347:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:14:56 executing program 6:
semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000000)=""/18)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
semctl$GETPID(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)=""/50)
r1 = semget(0x1, 0x1, 0x8)
semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f00000000c0)=""/91)
semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f0000000140)=""/162)
semctl$SEM_INFO(r1, 0x7, 0x13, &(0x7f0000000200)=""/173)
r2 = socket(0x18, 0x800, 0x7)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x138, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6a}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x6}, {0x5, 0x5}, {0x9, 0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x81, 0x2}, {0x7, 0x1}, {0x6, 0xfb}, {0x5, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x20, 0x1}, {0xd8, 0x2}], "56f528cf12e131d2"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xd4, 0x2}, {0x1f, 0x6}, {0x42, 0x1}, {0x1, 0x4}, {0x7d, 0x6}, {0x81, 0x5}, {0x9, 0x4}, {0x5, 0x2}, {0x6, 0x1}, {}, {0x47, 0x7}, {0x9, 0x2}, {0x6, 0x6}, {0x9, 0x5}, {0x9}, {0x81, 0x1}], "4f728ac205d1440c"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x9, 0x7}, {0x0, 0x7}, {0x6, 0x6}, {0x94, 0x4}, {0x5b, 0x3}, {0x80, 0x3}, {0x1, 0x6}, {0x9, 0x6}, {0x4}], "14752e92ad3e784c"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x40, 0x1}, {0x0, 0x7}, {0x1f, 0x7}, {0x3f, 0x5}, {0xff, 0x1}, {0x7f, 0x6}, {0x2, 0x3}, {0x80, 0x3}, {0xfe, 0x6}, {0x1, 0x5}, {0x9, 0x1}, {0x20, 0x1}, {0x70, 0x4}, {0x3f}, {0x2, 0x3}, {0x8, 0x6}, {0x7, 0x7}], "2cf54cf1cfcd9a53"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x5}, {0x0, 0x4}, {0x2, 0x5}], "066ea63c43e96b47"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x3, 0x7}, {0xff, 0x6}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x9, 0x5}, {0x4, 0x6}, {0x2}, {0x5, 0x7}], "1eabf03a9f3b8ed1"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x4, 0x5}, {0x1, 0x1}, {0x0, 0x5}, {0x3f, 0x6}, {0x6, 0x3}, {0x8, 0x3f}, {0x81, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x3, 0x2}, {0x3f, 0x1}, {0xff, 0x4}, {0xd8, 0x6}, {0x8, 0x5}, {0x7}, {0xff, 0x1}, {0x26, 0x6}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}], "00d55958c5a9aaf6"}}]}, 0x138}, 0x1, 0x0, 0x0, 0x850}, 0x40)
semctl$SEM_STAT_ANY(r1, 0x1, 0x14, &(0x7f00000004c0)=""/19)
getegid()
semtimedop(r1, &(0x7f0000000500)=[{0x4, 0x9, 0x800}, {0x2, 0x9028, 0x1800}, {0x1, 0x2, 0x800}], 0x3, &(0x7f0000000540))
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000580)={'batadv0', 0x32, 0x37}, 0xa)
semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000005c0)=""/91)
r3 = semget(0x1, 0x0, 0x404)
semctl$SEM_INFO(r3, 0x1, 0x13, &(0x7f0000000640)=""/4096)
clock_getres(0x7, &(0x7f0000001640))
semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f0000001680)=""/189)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7fff}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40)

11:14:56 executing program 5:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x8001, 0x2, &(0x7f0000000000)="e0820d549d9995c2b11c66b8556a30", 0x0, 0x0, 0x0, {0x3}}, 0x4)
statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x200, &(0x7f00000000c0))
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x6000, 0x800, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000300)=0x1, 0x4)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000340), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', <r3=>0x0, 0x29, 0xff, 0x83, 0x5, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x3, 0x4}})
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000540))
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000580)={0x2}, 0x2)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000005c0)={"c1d2c21663f8ccbd73ea0ca393fced2c", 0x0, 0x0, {0xfff, 0xa42}, {0x20, 0x5}, 0x7, [0x1, 0x7, 0x3, 0x3da, 0x80, 0x8, 0x6, 0x2, 0x7ff, 0xffff, 0x3, 0x0, 0x191, 0x7fffffff, 0x2, 0x4]})
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x2010, 0xffffffffffffffff, 0x10000000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r4=>r2, {r0, r1}}, './file0/file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl2\x00', <r5=>0x0, 0x0, 0x1, 0x5, 0x100, 0x12, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x10, 0x8001, 0x9}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x140, r7, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4e5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xc952}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb99d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xac9cdf4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4cd1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x3, 0x80000000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x312}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5b3, 0x80, 0x3]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x18000)
socket$inet6(0xa, 0x80000, 0x3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001600)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000e00)={0x784, 0x0, 0x706, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x0, 0x13, 0x7}, {0x9, 0x74, 0x3, 0x400}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x3, 0x8, 0x3ff}, {0x400, 0x1, 0x81, 0x7}, {0x7, 0x9, 0x2, 0x2}, {0x1, 0x20, 0x7f, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xe0, 0x40, 0xe7, 0xfffffffa}, {0x0, 0x1, 0x2, 0x9}, {0x1, 0xff, 0x60, 0x8}, {0x7fff, 0x2, 0x0, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x0, 0x81, 0x4, 0x7fffffff}, {0x7f, 0x80, 0x40, 0x5}, {0x6, 0x9, 0xff, 0x10000}, {0x3, 0x0, 0x81, 0x5}, {0x4, 0xff, 0x1, 0x1}, {0x401, 0x45, 0x6, 0x800}, {0x3, 0x3, 0x40, 0x3}, {0xab5, 0x20, 0x9}, {0x79, 0x68, 0x62, 0x7ff}, {0x7f, 0x0, 0x40, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x784}, 0x1, 0x0, 0x0, 0x84c}, 0x385ec478fc98bbc6)

11:14:56 executing program 7:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x440c0}, 0x4000000)
r3 = pkey_alloc(0x0, 0x3)
pkey_free(r3)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200))
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000c40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f00000002c0)={0x908, r1, 0x220, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7fff}, @device_b, @device_b}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x40, @from_mac=@device_b, @device_b}}, @NL80211_ATTR_FRAME={0x238, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f7f}, @from_mac=@broadcast, @device_b, @device_b, {0xa, 0x6}}, @a_msdu=[{@broadcast, @device_a, 0xb9, "951f4cf506002defcab5a7017e10453914d3b09fd0affd6ab39a56316a4d11908e969c3bfee7bea6ac9464259ff438c601c7eeebff164d8ad398338f9ccc9a7c9b21c7324ea0fa1cc3935d97d33972f0e0f27553249c2cf20057b990bb9ac5138781b09a17703a7f20ce7f46abb5a542332874da646e7b8f9cfab7f0f2ea788afdc1abdfc5ac31810d0eb59dcb1f998d5ef892957d0ca7d85c73f345f531f5ba144d4e03ac85867d41f4e51c41e8a0ec2ee391e156cc50b71b"}, {@broadcast, @device_b, 0x59, "9f6842b7961427f6ea2003157df28a941dde08d1ad1166599c0e8c099418ed77ad5cd904f3730ccc177b4db63e22c65a14e102ff02f64eab4259ea6c25a8aacf8051178460987b4d7431135761c6daf2e2ec05723056acf7b8"}, {@device_b, @broadcast, 0xdb, "adc016d97fd2179d44ed1c3aea2efdaeb1be3a57b98a87d25d857b139029761560d48a77ffda7a2c02c7450c0d61c5230cadb4d1d4858018893ecb3a78e03a5cfcbb2a0de26bd920d92a60ac04abdfbc3ce8586fc6fad206b88de61bc5274a5f408e191337f995ff1dc33113d446d4d778499b01e7ad06d803d1193df67f517b646ea880852e1aebdc913e5e08f7ec1b88a5123eb34d3d351e0204b79ffee4ae2a0fdf3012e1ed996dfc1e317b5d70c3981dbef679caafb940fdc815f902f313221eef53f44ce473aaedc04064afde93f2d5185e19a0b022091835"}]}}, @NL80211_ATTR_FRAME={0x3eb, 0x33, @mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x40}, @device_b, @device_b, @random="6a6527a0e31a", {0x7, 0x5}}, 0x2000, 0x57, @random=0x1f, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x5, 0x0, {0x0, 0x9, 0x0, 0xf8, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x81, 0x20}}, [{0xdd, 0x38, "26e595156b4e05ac07d670a313c53623afdf5578feeeddd1531625b5d65f8872fb813e8708843eb5c187a8b64db899c063e754a558822485"}, {0xdd, 0x8, "64d051135887bb52"}, {0xdd, 0x9f, "ba2c324d63ad10a8bbb825a97466727fd523aea0be32bbac4e4c87e1617f52c51db358f5d3c5e88f2cac68a35ca8909577a17b7a4dd8579e7a82a1a4551588950bb2bc0b7d72f7642a925495b182a28fcf695134059670bb7236d5b249746ba19b7c2bf6af617c08d458b1c0f24a5b77034a312b5237b1c50f180a09e4783d9059a22b6c2c73890bdee54900c8e980aea9bd219492c3268f6cbc2176277ed1"}, {0xdd, 0xfe, "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"}, {0xdd, 0xda, "23e76f2d8bb70d9f3c44ba8d434602b8a2cb3a75d7d9c2f777744b4d800489cd20a672155dad45075b30cbc59e91873fc948668540dabc42f05e65f2c138291f426f8684a2d5b9372ae01fc1da28889fc41e55d51dc6d4fff6ec31fffbfbe3c7de871209f5c3e2ca635617151f23729ab9d3fd7399beaff2829b45643ea867d771adda717f353e481476ab355d80c96b9adfdb8c63af2dfea5fac777fc668f9c4829cb3171e7a6613e431be1d1cd54b9158e75aecce03817c342fadceee642b6852db443eca5039eb674492e20db37721c9812d1d41038a17cc9"}, {0xdd, 0xea, "5e5e402e84d114a7868a19657c5aa0f7a888dba4fa39a3fcd376776c69ca57733f4b63c4b6ba8e87f71cf521575cc7843ed3203eba582ba0c28dc0e9b0af5c28bf71f9680447424a308a83eac1cfc351ca36b51f5857382575b84eecd36e5b1e41bdf46c3cd271642623bc0ad9df139c7e5abdb1059515f15ef6305fa9b1cee6d1e0842f3ea2714a2ec0044f8ed8437f3c3feb55e6cbb83c6751185eb9bfa2d9dc4ab14777b2eec78f1302dadff5bdc0a61a92ba8f06be0b3bd906b1a8bbe49c1b8c797f7bbfc0ce58fc49590fe27c00e6fb0d61d93888b1067a0f0120cf8f291d9dd33e340c5938dace"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x285, 0x33, @mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_a, @device_b, @random="f856217028db", {0x9, 0xff9}}, @ver_80211n={0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x1}}, 0xfffffffffffffffa, @random=0x4, 0x4, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x7f, 0x6, 0x6, 0x7}}, @void, @void, @val={0x25, 0x3, {0x1, 0xb1, 0x9}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x0, 0xae, 0x7}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0xffffffff, 0x1237, 0x0, 0x93, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x7, 0xe0}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xbb, "3152796de1eb4153d5d7ff314f1da526e783c75a0347fb88d9cde0fc82af6bf6a6f96e2a264440f6af80a18c6f06f384998b6bab93e8f8bca3d34e6f1aef9f15ffc2ef87c9b7d08a33142d14005a9fce1e39b9c1b348b4b30125a9efd89fdaa7963880598ec553d1c7d77b8470f8755a06b03c35db4cb87223202d57b9b750d10912f269a8f538fd4cd2e45abfe7e324765fb586e3f28796acfeaad49011f8495e2e237ebd29b8ea01219e1ed05b80b7859e9ff1558850cc206019"}, {0xdd, 0xae, "dc40536f3550a77661975606078af4d2ad989f5067eea8ea8f39459b0b47a7a7810ece8d19b7cf03bf602c1f959dac2f9826bb0fccfd4dffcd58296f352beaa7304ff3fd60ba3582e90016af30d6184f2133dcce6e05e660660113a42ffb7aa92c87a3e769c268642134118bd35a0c84cf3b86d0170bfd64794c4fe85a6f4a60e06f7bd57b52f8111a6d837729b37066ec940ea33840ea410143d93765a4bf60ca262fe9a0b89371f010ac574719"}, {0xdd, 0x64, "03486ca5af0b0ec606921b2fbf36fab512df6f8c9e00e3ad9f1b909c66818688f2e559698ea12057791a2832c230dd08c97ed8d2cfb7c5df06b811bde332dd0739202ee044d6544e93920f1a2a2b600abcb36f1528f30d1ee9035a24afe4b51e6bf4e9f7"}, {0xdd, 0x1c, "9794b9240505bc69ece38db43af171f85443b38fa9327e20415e6616"}, {0xdd, 0x24, "61ccbc8992a1044af5591784ef70e81148adca4bf2f2072e4be70306e9e7251637c3fea9"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xff}, @device_b}}]}, 0x908}, 0x1, 0x0, 0x0, 0x8000}, 0x20008840)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000c80), &(0x7f0000000cc0)=0x2)
open$dir(&(0x7f0000000d00)='./file0\x00', 0x400, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000010)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xd4, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0xf}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x20d}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xfffb, 0x1ff, 0x6, 0x3, 0x6, 0xffff]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @from_mac, {0xe, 0x80}}, @ver_80211n={0x0, 0x8, 0x3, 0x3, 0x0, 0x1, 0x1}}, 0x42, @void}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0)
accept4$packet(r0, 0x0, &(0x7f0000001080), 0x180000)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, r3)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, 0x3f7, 0x800, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044804}, 0x20040001)
pkey_alloc(0x0, 0x5)
sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, r1, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x76}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x40040)

[  105.071119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.080749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.081785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.089939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.095251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.096416] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.103220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  105.104147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.106439] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.107245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  105.108013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.109044] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.110027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.115987] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.116873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  105.119548] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.126872] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  105.129608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  105.129845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.130543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.144226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.162691] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  105.179140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  105.180332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  105.180886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  105.181542] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.185889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  105.186808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.201000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  105.202095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.210668] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.210699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.211520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  105.212630] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  105.213924] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  105.216815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  105.217924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.218720] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  105.228796] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  105.229862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.251602] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  105.252649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  105.256886] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  105.258009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.269586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  105.272652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.275644] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  105.277597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  107.249736] Bluetooth: hci1: command tx timeout
[  107.250920] Bluetooth: hci0: command tx timeout
[  107.313604] Bluetooth: hci7: command tx timeout
[  107.314248] Bluetooth: hci3: command tx timeout
[  107.314323] Bluetooth: hci2: command tx timeout
[  107.315025] Bluetooth: hci4: command tx timeout
[  107.376739] Bluetooth: hci6: command tx timeout
[  107.377329] Bluetooth: hci5: command tx timeout
[  109.298635] Bluetooth: hci0: command tx timeout
[  109.300097] Bluetooth: hci1: command tx timeout
[  109.362611] Bluetooth: hci7: command tx timeout
[  109.363148] Bluetooth: hci2: command tx timeout
[  109.363752] Bluetooth: hci4: command tx timeout
[  109.364205] Bluetooth: hci3: command tx timeout
[  109.427713] Bluetooth: hci5: command tx timeout
[  109.428247] Bluetooth: hci6: command tx timeout
[  111.345605] Bluetooth: hci1: command tx timeout
[  111.345632] Bluetooth: hci0: command tx timeout
[  111.408735] Bluetooth: hci3: command tx timeout
[  111.408775] Bluetooth: hci4: command tx timeout
[  111.409213] Bluetooth: hci2: command tx timeout
[  111.409683] Bluetooth: hci7: command tx timeout
[  111.473021] Bluetooth: hci5: command tx timeout
[  111.473739] Bluetooth: hci6: command tx timeout
[  113.392565] Bluetooth: hci0: command tx timeout
[  113.394048] Bluetooth: hci1: command tx timeout
[  113.456595] Bluetooth: hci2: command tx timeout
[  113.464543] Bluetooth: hci4: command tx timeout
[  113.465038] Bluetooth: hci7: command tx timeout
[  113.465537] Bluetooth: hci3: command tx timeout
[  113.520723] Bluetooth: hci5: command tx timeout
[  113.520744] Bluetooth: hci6: command tx timeout
[  164.965273] syz-executor.7 (291) used greatest stack depth: 23312 bytes left
[  167.361060] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.370629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.371901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.375190] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.381150] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  167.382390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.434829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  167.445987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  167.449878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  167.455310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  167.461592] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  167.462855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  167.621232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.629795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  167.636911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  167.644241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.646854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  167.651774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  167.652836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.653960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  167.655004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.661129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.665602] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  167.668782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  167.676224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  167.687935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  167.690044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  167.699362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  167.723364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  167.724285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  167.740806] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  167.741122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  167.748748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  167.752774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  167.754038] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  167.762660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  167.778097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  167.778295] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  167.793757] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  167.794504] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  167.796582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  167.807726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  167.853640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  167.863204] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  167.866156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  167.879193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  167.887320] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  167.908810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  169.456621] Bluetooth: hci0: command tx timeout
[  169.520597] Bluetooth: hci1: command tx timeout
[  169.714526] Bluetooth: hci2: command tx timeout
[  169.776673] Bluetooth: hci3: command tx timeout
[  169.904738] Bluetooth: hci5: command tx timeout
[  169.904826] Bluetooth: hci4: command tx timeout
[  169.969788] Bluetooth: hci6: command tx timeout
[  170.033589] Bluetooth: hci7: command tx timeout
[  171.505559] Bluetooth: hci0: command tx timeout
[  171.514705] hrtimer: interrupt took 2551264 ns
[  171.571511] Bluetooth: hci1: command tx timeout
[  171.761582] Bluetooth: hci2: command tx timeout
[  171.824647] Bluetooth: hci3: command tx timeout
[  171.952645] Bluetooth: hci5: command tx timeout
[  171.953529] Bluetooth: hci4: command tx timeout
[  172.027602] Bluetooth: hci6: command tx timeout
[  172.080795] Bluetooth: hci7: command tx timeout
[  173.552612] Bluetooth: hci0: command tx timeout
[  173.616787] Bluetooth: hci1: command tx timeout
[  173.808597] Bluetooth: hci2: command tx timeout
[  173.872625] Bluetooth: hci3: command tx timeout
[  174.000671] Bluetooth: hci5: command tx timeout
[  174.001684] Bluetooth: hci4: command tx timeout
[  174.065635] Bluetooth: hci6: command tx timeout
[  174.129560] Bluetooth: hci7: command tx timeout
[  175.602842] Bluetooth: hci0: command tx timeout
[  175.664840] Bluetooth: hci1: command tx timeout
[  175.857571] Bluetooth: hci2: command tx timeout
[  175.920739] Bluetooth: hci3: command tx timeout
[  176.049589] Bluetooth: hci4: command tx timeout
[  176.049638] Bluetooth: hci5: command tx timeout
[  176.113543] Bluetooth: hci6: command tx timeout
[  176.177815] Bluetooth: hci7: command tx timeout
[  230.092184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.094861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.097340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  230.104202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.105931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.110860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  230.112685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.114517] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  230.115709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  230.123274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.125873] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  230.128749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.229243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.257270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  230.258999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  230.260169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  230.263411] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  230.265022] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  230.266160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  230.302732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.307888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.325074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  230.336574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  230.338954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.343382] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  230.345001] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  230.346257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  230.352707] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  230.355418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.356721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  230.358281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  230.359153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.363208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.364051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.369113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  230.395860] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  230.420315] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  230.422428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  230.485025] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.486013] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  230.486606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  230.488794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.488909] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  230.490431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  230.517333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.582654] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  230.609862] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  230.648229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  232.334739] Bluetooth: hci1: command tx timeout
[  232.336407] Bluetooth: hci4: command tx timeout
[  232.337165] Bluetooth: hci0: command tx timeout
[  232.432646] Bluetooth: hci2: command tx timeout
[  232.628048] Bluetooth: hci5: command tx timeout
[  232.629134] Bluetooth: hci6: command tx timeout
[  232.688553] Bluetooth: hci3: command tx timeout
[  232.822826] Bluetooth: hci7: command tx timeout
[  234.354518] Bluetooth: hci0: command tx timeout
[  234.355065] Bluetooth: hci4: command tx timeout
[  234.355999] Bluetooth: hci1: command tx timeout
[  234.480602] Bluetooth: hci2: command tx timeout
[  234.672663] Bluetooth: hci5: command tx timeout
[  234.673191] Bluetooth: hci6: command tx timeout
[  234.737613] Bluetooth: hci3: command tx timeout
[  234.865520] Bluetooth: hci7: command tx timeout
[  236.400561] Bluetooth: hci0: command tx timeout
[  236.401084] Bluetooth: hci1: command tx timeout
[  236.402075] Bluetooth: hci4: command tx timeout
[  236.529553] Bluetooth: hci2: command tx timeout
[  236.720620] Bluetooth: hci5: command tx timeout
[  236.721158] Bluetooth: hci6: command tx timeout
[  236.786500] Bluetooth: hci3: command tx timeout
[  236.912933] Bluetooth: hci7: command tx timeout
[  238.448689] Bluetooth: hci4: command tx timeout
[  238.449217] Bluetooth: hci1: command tx timeout
[  238.450349] Bluetooth: hci0: command tx timeout
[  238.576529] Bluetooth: hci2: command tx timeout
[  238.769710] Bluetooth: hci5: command tx timeout
[  238.770237] Bluetooth: hci6: command tx timeout
[  238.832681] Bluetooth: hci3: command tx timeout
[  238.972568] Bluetooth: hci7: command tx timeout
[  292.573128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  292.608383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  292.609727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  292.614857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  292.621784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  292.640226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  292.642090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  292.643596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  292.655547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  292.707605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  292.708920] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  292.710408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  292.712315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  292.713208] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  292.714615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  292.718113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  292.720015] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  292.725127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  292.730617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.733663] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  292.747931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  292.751868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  292.754320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.765268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.785359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  292.806279] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  292.806955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  292.810946] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  292.812659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.813887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  292.816939] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  292.817027] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  292.819701] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  292.820975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  292.822008] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  292.825118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  292.827671] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  292.829074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  292.829382] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  292.836401] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  292.838282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  292.839704] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  292.872123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  292.873332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  292.893836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  292.896029] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  292.915831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  292.925985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  294.713401] Bluetooth: hci0: command tx timeout
[  294.781866] Bluetooth: hci1: command tx timeout
[  294.841923] Bluetooth: hci2: command tx timeout
[  294.902515] Bluetooth: hci4: command tx timeout
[  294.905998] Bluetooth: hci3: command tx timeout
[  294.906642] Bluetooth: hci7: command tx timeout
[  295.025585] Bluetooth: hci5: command tx timeout
[  295.027577] Bluetooth: hci6: command tx timeout
[  296.752743] Bluetooth: hci0: command tx timeout
[  296.816661] Bluetooth: hci1: command tx timeout
[  296.881399] Bluetooth: hci2: command tx timeout
[  296.944572] Bluetooth: hci7: command tx timeout
[  296.945184] Bluetooth: hci3: command tx timeout
[  296.945215] Bluetooth: hci4: command tx timeout
[  297.072753] Bluetooth: hci5: command tx timeout
[  297.072775] Bluetooth: hci6: command tx timeout
[  298.800519] Bluetooth: hci0: command tx timeout
[  298.864506] Bluetooth: hci1: command tx timeout
[  298.929202] Bluetooth: hci2: command tx timeout
[  298.993561] Bluetooth: hci7: command tx timeout
[  298.994079] Bluetooth: hci3: command tx timeout
[  298.998458] Bluetooth: hci4: command tx timeout
[  299.120899] Bluetooth: hci5: command tx timeout
[  299.121508] Bluetooth: hci6: command tx timeout
[  300.848650] Bluetooth: hci0: command tx timeout
[  300.912660] Bluetooth: hci1: command tx timeout
[  300.977531] Bluetooth: hci2: command tx timeout
[  301.040697] Bluetooth: hci4: command tx timeout
[  301.042173] Bluetooth: hci3: command tx timeout
[  301.042222] Bluetooth: hci7: command tx timeout
[  301.168765] Bluetooth: hci5: command tx timeout
[  301.169342] Bluetooth: hci6: command tx timeout
[  355.195870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  355.205391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  355.210733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  355.213358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  355.219779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  355.220907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  355.263880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  355.271847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  355.273353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  355.282303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  355.296571] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  355.298331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  355.406488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  355.407091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  355.410380] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  355.419251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  355.432555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  355.440954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  355.441860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  355.446544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  355.449933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  355.456221] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  355.457330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  355.467357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  355.523572] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  355.533612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  355.535493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  355.536490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  355.538818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.542145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  355.543357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.544393] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  355.564659] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.579541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.607672] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  355.608946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.756655] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  355.872565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  355.879582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  355.960468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  355.962404] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  355.970982] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  356.011070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  356.048826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  356.067095] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  356.098924] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  356.108869] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  356.116552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  357.296749] Bluetooth: hci0: command tx timeout
[  357.360527] Bluetooth: hci1: command tx timeout
[  357.616565] Bluetooth: hci2: command tx timeout
[  357.616599] Bluetooth: hci4: command tx timeout
[  357.680539] Bluetooth: hci3: command tx timeout
[  357.754798] Bluetooth: hci5: command tx timeout
[  358.064922] Bluetooth: hci6: command tx timeout
[  358.192621] Bluetooth: hci7: command tx timeout
[  359.344503] Bluetooth: hci0: command tx timeout
[  359.408572] Bluetooth: hci1: command tx timeout
[  359.664616] Bluetooth: hci2: command tx timeout
[  359.667032] Bluetooth: hci4: command tx timeout
[  359.729691] Bluetooth: hci3: command tx timeout
[  359.792785] Bluetooth: hci5: command tx timeout
[  360.112538] Bluetooth: hci6: command tx timeout
[  360.240665] Bluetooth: hci7: command tx timeout
[  361.393583] Bluetooth: hci0: command tx timeout
[  361.458178] Bluetooth: hci1: command tx timeout
[  361.713542] Bluetooth: hci4: command tx timeout
[  361.714077] Bluetooth: hci2: command tx timeout
[  361.777517] Bluetooth: hci3: command tx timeout
[  361.842965] Bluetooth: hci5: command tx timeout
[  362.167293] Bluetooth: hci6: command tx timeout
[  362.294462] Bluetooth: hci7: command tx timeout
[  363.441509] Bluetooth: hci0: command tx timeout
[  363.506710] Bluetooth: hci1: command tx timeout
[  363.762539] Bluetooth: hci2: command tx timeout
[  363.762588] Bluetooth: hci4: command tx timeout
[  363.824520] Bluetooth: hci3: command tx timeout
[  363.892468] Bluetooth: hci5: command tx timeout
[  364.208597] Bluetooth: hci6: command tx timeout
[  364.336543] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
11:20:06  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88802861f620 RCX=0000000000000001 RDX=1ffff110050c3ecf
RSI=ffff88802861ff48 RDI=ffffffff81000130 RBP=ffff88802861f678 RSP=ffff88802861f608
R8 =0000000000000001 R9 =ffff88802861f660 R10=000000000003ab5c R11=00000000000c281e
R12=ffff88802861f6e8 R13=0000000000000000 R14=ffff88801a578000 R15=ffff88802dc33b40
RIP=ffffffff81348c1d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f40898248e0 CR3=0000000023ea2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000246 RCX=0000000000000000 RDX=1ffff11004a87148
RSI=ffffffff85d06758 RDI=ffffffff85d06740 RBP=ffffffff85d06740 RSP=ffff88802aac7b30
R8 =0000000000000001 R9 =ffff888025438a48 R10=ffffffff864043d7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000246 R14=0000000000000000 R15=ffff888033eefbd0
RIP=ffffffff81509594 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f871d9cc008 CR3=000000001a7c8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000