Warning: Permanently added '[localhost]:15010' (ECDSA) to the list of known hosts.
2025/04/25 15:31:18 fuzzer started
2025/04/25 15:31:18 dialing manager at localhost:46629
syzkaller login: [   93.268856] cgroup: Unknown subsys name 'net'
[   93.400674] cgroup: Unknown subsys name 'cpuset'
[   93.433154] cgroup: Unknown subsys name 'rlimit'
2025/04/25 15:31:33 syscalls: 212
2025/04/25 15:31:33 code coverage: enabled
2025/04/25 15:31:33 comparison tracing: enabled
2025/04/25 15:31:33 extra coverage: enabled
2025/04/25 15:31:33 setuid sandbox: enabled
2025/04/25 15:31:33 namespace sandbox: enabled
2025/04/25 15:31:33 Android sandbox: enabled
2025/04/25 15:31:33 fault injection: enabled
2025/04/25 15:31:33 leak checking: enabled
2025/04/25 15:31:33 net packet injection: enabled
2025/04/25 15:31:33 net device setup: enabled
2025/04/25 15:31:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/25 15:31:33 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/25 15:31:33 USB emulation: enabled
2025/04/25 15:31:33 hci packet injection: enabled
2025/04/25 15:31:33 wifi device emulation: enabled
2025/04/25 15:31:33 802.15.4 emulation: enabled
2025/04/25 15:31:33 fetching corpus: 0, signal 0/0 (executing program)
2025/04/25 15:31:35 starting 8 fuzzer processes
15:31:35 executing program 0:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000805)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x640, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000040)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x24080, 0x0)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000480)='/dev/null\x00', &(0x7f00000004c0)='./file0\x00', r1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x46}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3f, 0x77}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r6 = syz_open_dev$hiddev(&(0x7f0000000780), 0x401, 0x800)
ioctl$HIDIOCGNAME(r6, 0x80404806, &(0x7f00000007c0))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x46}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24020000}, 0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000980)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x18}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

15:31:35 executing program 1:
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x63}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x886)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000000140)={0xf10, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x58}}}}, [@NL80211_PMSR_ATTR_PEERS={0xee8, 0x5, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb40}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ec9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}, {0x488, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x164, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x38}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x142e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb8e9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x93}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb993}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff8a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x558, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3a0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x464, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb6}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa0d}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xad}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3d6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd3ff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc6cc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}]}]}]}, 0xf10}, 0x1, 0x0, 0x0, 0x1}, 0x48800)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001180)={0x1234, r0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x363}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "a88d8a3f73898810cda3de4070ec975f6ea2cd41642b156d7526c0af82a976d14c8e00557410e433e16f531ac94d912e544d9fd514f50fd372c99cb7db9dbe4559bbd75bd88bff921be3660bdef8ee214074e67195d60d9db783eaaa6126aa0400576f141a8b2f0ee7682159349f27747c8623a427bea2e4eb8b390919642158067d302187420288f941ccc2419b167e4f214b3a62ff2d2b0ecdf1e56a1ef3c9ef45a5266b8a00bfdc9a28d2ca2e8c199f94e1aa9bd2f30e2256eb3e62ccf1b74325c34487976edbae25265dbc3708bf4bbcf5f038d89b39fdb0e8d1d0f23f0250b10aca925742003a0dd4023f95543dab12b3ba58f7eeace58fd2ba3c203c9800cff05798cae8cd5e6b7fa979374901a9e46a12b7fad1b5d54bc6ac3db5d5cb9b30d04d9acf9972d8dae1a61b50f8d3d65221605ac4b33796c1e0be1542a8c109a5280e7954fcea33017957941a904d4623169227621f4f46c7c0997ca41b5ebe61f7f67b0bc5e302e908527d40eca621d6856d18a6a1559178bf4da970ca97358f4b420a82bd4e65321954c29888099a6c7d4a75c0fb20129ce6b5088254277d30ee28a0cb9e755468003440ef40ba1b5414e7136f97bb7be0756689724acbf739906e0e6ba0991f2ca2f4e1ab4f5220f4d28432a2ccc4f8b8b60a0f2c4969dad590012eb92defc94261341c6e722f73612d47ff8f69f1e1f51cead3d51373edb1a0407c3afeace0a62eaf44e58ec5596fc282eb1bbb22662fc4455aec05fa8e87b667b327661a039360dcb50e67b1863cb78304e0be453b9d511dad580bf3777674fbb9599d27bb0075576e0459bbc508f753d217df9b7e6a36a3f49b9e38dad162891caf72edf32407308614038a008ba35c2291793a0ac3988bfcf4113935222bfa7efcda83c4e593899a3b9f1fe4d5645f371a56301802e9f5f180dee1c571c756d57553170379a7c5adf6a4949c63a283ffae6856f83f12625aeaf341128b682f73427d7e249d39aa06b1e7c6511bdeb72cb04f8b255935bb59020456cf51165ac7352bc506c47af8a526ab998a2610f3015be43cbdba27cb5210386175188799d2ff4f458c0ac8e61860eeb208cf5c3c1370492003cbe4917c359dd1ea1cb449195af76a478c8c807d63ac51b78478ee3f4f6063caeb6531cef410b86391064adb46e0f8530fa090b30195b6062a30ccf2a80683b68ebab278aa9c5a8bb6608f1dbbe53e06fd14afda3e9d481d44e31984ed654839b9d145e55be09fbad0d93d2cbb035114eb6ab3dbf4c7e78b578285bf32347044a4a3a8cb43fda9c50ce4deb434048a3191597d0f81ce2505db04efb8f5c499dec3132469c85562f5945a1d8fc4926b3f009190a24791141798f880d615970ff6e3ebe31ad1481d569d5de83aeafeb5be3fadf854e10b9ec24d9b8b1ac3553e62ed79837bf94e28ca784eb0be9fd039a4beef67ba93ca53b589009b086abbca2501715159622be6ec983d6aa7b409684da5c0c53dcc88bec5bda1e6ece61eef22fe969cadc7cc86274885a6a86d3e29a52b1f819f4024841a91d906da4438c2ee70fa7365c6758368a76aad07f054e72ae43dfe97066ff6c94e394babd9de4b6dca436e9ce0392bd0d3ac9741ea0868dc999686534d0d67db7254dd1eea013eef6609170be6e83f5e00523cdf5d59f070bafc12ad25fec2b1bc5fb7f594cf82f567344e18aebaa9f66764209f2be2b8bde6f499396d5255ee99f07caf08ff9c2fd78b8e84b380c6364292767db0985cf4896d851ebaf12cf2bbfc9502911a16b7a7349e7832c3d0108aa371006dda58b70ab3267a208dea8c6cfc4d5f27f6c878b7204a52add4ddde1eb973dd86e9df685fac770341297d01ca506a1af73f2fc2836119c74122570fdc17691b18ac25b49df73cc2596156ac373c86018ca9fce4cdf67291d8a2999ca22bab05298ac4cdb65713d454787d52c5e37e1d501157b20e75ba3435d75a127e9852a5a24326d7fa4bc1d14831f1af48c2ece6a14ed25341ca647b640571f8e2bd3024ffe3554e8ff6bc18a19dee698fcd44e4e6e00f7e2b6c74bc49808a79114c7c72dad2d58009170e8cb5f7d7eeda81e90e04731b728f2bd9f5190c0d26c8d61d38b35a1488998a67834c9b0b1db9c851a9b121dd00983239c81c63b638d699b1c9071b4ba7102544204758c8ac147a5c67c506b81cca2e1cefcf83837ee78a8b12f19335c90a47c391e3c2ec75d79e8f887595e0c35342c7494b5e7f1a5fb28b5419acfd6e6f7bb5fbd3e0e5a5ab67312c70560e132d20733510822bcffbe8fb26d2c54ebad334b1055c2b58239c3d3316c0f4b0c63e08b175ff3a6516902f8b3227b95efd72d4b386bcf39d17b4648538c49166246e96f8889ece583935ee6a5925cbf3fe73c26aa5a0e81f02d1e897755dc2d2c549035b828d240695d43cd43438cd0bf4bc2a047a2c404ad8b25df75651253fa0c377b3eec6e1c7ab9a71c2d3166c4fb508157f270280e87f7aa6f5083af14a7a91b0964e6b8bf90c70f5a8ae02a29197fcaadf5ec7de1473988d8e45998910b3dc5f3df3dbf04e3010351987497dc49e106468894225721c6f643994118ec20c5599cc7711aaf82f074e1b3f20d18a6a30d961813b77503a17f4b51c6f2f64a5a30ef4e8bfa4f070481d689f06c90e18c6549b93c3fb0e97cb4947221c9a3e05db1d875fda390976dc101bba00a05c0f73b60bf29f7c3c2f67fa4a8272567be25e8c9cf4a91403792f1d7f9de4ea46031caa5951eaf47b9075bcf0f70222b0c1f5e55442473a85c22d7deec1ff228f881c5cd7b0fb0b77cb7952592546907f1a6a765e39528653c8710502999977fd3aeb8549fc20b790106d87586421e9c090806d91e42c7479ca3dabcbf4eb8f40da704ec937eb5af588d9b4da8e8f1221bd03706729de525825bf150069176f0919caebecf3ebb3de28b1f9431dfb65f053caea5981964f4b3af38c9decef26165c97bc1c18121dc8b2f859f7cd60fed2229d69a27de5f1b027d4c8bebc38bad775cae72f3b40875005eaa5842ea6bee5d847e3446a164679f622575b39b65264494d9eaf6a21c6aee1146b999050e063b0523a0057511f969be2f24f642f70c4eb5d13876fd48eb9afe16149f0f4f3fe74248fdf6ad315c4767870e2c2bd50dc83f6a6ebb16e9f5d22ff6193aeb5b0e9ce91cdd2d6eb602107fb048580dea48df2ee1dfd1b2def9e072cf63dc72b009c6bd0e30ee7ca79f1c5fed8e07e3015e73453eb1232cc4c774ab3d42028b7be5589ddccd0575cf2efc9c5ade9135b9b06dde708eb946a282b0a82b76b528f570fcd917edab2d4b35e789a73cd598a4a1bf86949115c027ecfc6e0e995d7de3aa0a80d2e0b87a40c2938a8a008f96ff295cfcd7cc8695cf96448b5620d5846496eb4d408db0a2b8eb8613a032dceac6a5df53daf6d868f8863e85a5bec6dc8785eb9e21a15c0151af6b62f30abba62da4b9389b3bc3bcfa25aad90980fbe94931567fa51fb4614c5ff02cc4a004fb9020bc4c9c023a365e2ad8fbfc093ff5cfb56b8a17d05c5eb77163a321a1c944e12c05c849dc07153279089014687f7d65a87ec7e8a11a62f3068cd24ac9322b27204b9152935f8dc45096782eecfe3a0e0d6dc19a82d5a6c520ea5c8a1961f4b464672e6b47ccc62d3bd691c1ed32fa4dbb5705446413d1abdf19c0f855104c98c92fb52db7afa6a65c3ccfff3d8ef424adb9c65fb2d3ed07c490c71abde81671e1411f6d666f6e1999503ed832e980b91b0994034a6a7bcb41f245db5cc25c74f63389fc1fbc6bd09b7695b7d2128349cbe27df963103d6dbc35775f847db93dfd5f676fe3328deddcdee1026fd0cb835fde8fd2b30a12c7fc92e754e5448796c09df4f298c3bce64cae9a85178a60e9fdb52a70d2a39eaded9cfe71afa4951c145a45650e7278c9a582aa6ccab6c74b2c3129784f41190e9c3727b50aab7679b45e4ff06fae635e9e0492f6d9c8715b0e62848f593090da0bb82d864b18c347d63cc8205599bfaca740e065c4f4bd03415d840b88b682d84dab96da19fb1d431cda38e52616e2cb9c41d924d4d7d0466f862df61c345745b2bc2a5e07108042a7e2f87782dfa8a47c6fce191d4953fbca8f1ddc72dc2e9d1635ab1d6968a33126f97a12bc810d0e7bea2dbc8075b7dd71df5b77974d0791c8251dd28d7ab724f952771f0f33482a5a1a4400acf26153388e2258186d7340816758e191f6dfe4d04ca65c5958c9b91c87e9183a79a91e720dee82a34b8ca86c505edd51f24116b9418021594bac24dc7342ad388c3c2b07b27be6c11fc418350885a51860e46bf464dc654bfc3b3ea97540a8b0f3f4b7d034036fb4c0eab34ecac932fbd568a2175afe86b99f9ecbb307b426b640d888a35054988cb45131004a72922f09e5e90919975002ade8fbd0ddc00f499760b5b1d4c2e9ff8919f9587e8c92670ffef081f0d8c1459a08b7ec2adb174c311e8db0698d7b5d3994c99ec8f9d77b11fdc862e8fa65a949096a73a7f7984063a65e882c4dde269e3cdc184ce282ccdd1e70fd370d03174de353de88245b5171af64eebfa229f2ec4b0ccb113501e8b36452a457eb88b786771ca0c03f8bdb22bfeafe744ff0b6d5241bab525345da96feaf420bf9fe3f1f2c181f020830ffd54c1cf9374ae33186a9586a43c2c72af1ba297a7f225f294f0da0f7161ae585e3f4344a84378f6f5ec437d190da25fd388ab545d526ac3371b73751e94fe0cd6cbf565741cbd13a583d7c58a17953db5b6cfcd2f8b5531b057df6c3bab73d58f655121a3281e6a12bac85330892cabac011151401d5328852e7b7fdfb65666ae86b0d5316803201e664047009b126201f88f4ca8899e3150ce63c1a8f3ebedc38254f15e6e4731c2c1157060a8211836da6c338c10163f51959d92de171b75a9d237e072b2d19477e83a60008e62b6bd1c44757d73735099b90b77c893a424b3caf3ee1b2246e64d6139d424bdd98f48e53d6d468870c81c3d39ff5c91ee3bb8274608e9d73913b36b0e43d3cd495aba70a456f70464a2679b0f372ae547fb99c54f2a79cc73acc9c8f8f084007acec55d8c470e0d090e83907e0bfbaa914afa656fcb32457d9e7b01a1397a0b691e31e737897d763251ce68d09ffab5ea1d0078674af5edf7672ef2db2ff495fdfae3d624976f697dde2dc5a560a73b153ceaf77e149176199f373062672c73e613bc38a725851ad49c190b2270c2430677708a82c451f211697664de6868d116db8c2113e58ad46f7110527f224c619dbb8e42368a80bab00fd1f02b257aa83d8c7598db57eefec72a340267fd0eb10226c8a6f84b0e542847e9e653f806660a56448f51217dc17dda77e30874549d41dfc9adcec032246bd9abeaffbece84bdbb0da0361a78ba09aef1e9a9f7c518826175b1be905119a493661767c14a7b03d332deef94a93257ec143b9305f47dbe2cf9c40c748c0d197660c44b343130073ab9e5598f8bd1286f913d839159fd1a6772f2b6cafe2caa4abb63ee75dc26289a39a2100f3c1bdf8b5709014d91a3ee5b39261accdae86072cb7143be6e4a9be8c4954bdb67fb3a50baaaa680fc2a7fbcdeb19e1c42422e791ff1d1ac885780bc2d3f58b24fa624c2c155d11913dba6a540dd43b60ea93e812cd9a6b0ac790c49bc9f9377a7d3e3363d4c6f0adbd00eec12256e0dbff11ee591754967982014041e57f2a0d4ac8679154da7fbecf153cdd89881af90c4f3409c8c54691c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x20}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x82}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0xd3, 0x5b, "407dba263b03c5693d4d728f3054efa0b79e25cc0ab7f019a54e4d10b8c2cd0c0612373252fcfcd535b49ac4a7c51f6bc06100ee4367c5e4dcdaa080575fa358d5d71649aecf62ce11e6cb9b195a2322c15f88cd8adbb0c7a95450fa854d0c71b4b8c66e28dae4f6e303497c3e68ff94954d34617d21e49ab5525ce3218c6548b1a4153b1b937493fce1f090cb6273758135958a4da0470d53b49c85c6af10d58a7b6574b2208b876c47d23a4debc1b5f6403bb425eec1731a679fb49b7dc1e3cb25ba4bf327948e38f0b3e60bab9f"}, @NL80211_ATTR_FRAME_MATCH={0x47, 0x5b, "93e616fcddf4b510cd02cce0efeb7e0b83003604931cafa1caba3144b9f1c06115825735ac996ef78613766fff699c6fa793758382fe28585a884f97e6760535902b0c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xd0, 0x5b, "35ca908957c1645604add5b4e1f8647767d58120b358922c83db7961981a67fd7073d6c58398466fe204ce8696a69ac773f635294e8de5945ef6549f4f1d76bc339ddbe5e855ee030c396b78c43afa35f35a57a84e7ead6e70394d7ba7c3ec4f4a532bf2d6ee3d1fa7ccbaa35be039483dbf4f60d0666cf28a0daf2445a4c76880d3655cb5e916699e6c0fb196324e9a80fe52dd8a90a89886aa7a8c8b171b2128112ec50d20b0c5fd7ec27dc3d68d35550dae29c1606e632b5bc5c4e7546beab7a8d752af0dc9eb74a80dbd"}]}, 0x1234}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000001)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x20, r0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x74}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040048}, 0x80)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x400c051)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x6}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4a840}, 0x14)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x80)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000028c0), r1)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
r5 = accept4(r3, 0x0, &(0x7f0000002a00), 0x800)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x68, r2, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x8c1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002bc0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x24, r2, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8, 0x3, r6}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000851)
r7 = accept4(r1, &(0x7f0000002cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002d40)=0x80, 0x80800)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002dc0), r3)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000002f40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x3c, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4005)

15:31:35 executing program 3:
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='](\x00', 0x0, 0xffffffffffffffff)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x440582, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='{%]\x00', 0x0, r0)
r2 = fsmount(r0, 0x0, 0x80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000200)={{0x9, 0x3}, 'port1\x00', 0x1b, 0x20, 0x10001, 0x6, 0x1, 0x6a410e98, 0x7, 0x0, 0x1, 0x5f})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000300)={{0x9, 0x5}, {0x5, 0x9}, 0x89, 0x0, 0x5})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1581f6b5d63d92e2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x546}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x32}]}, 0x60}}, 0x41)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000004c0))
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x800, 0x70bd25, 0xdcd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6b, 0x42}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000814}, 0xc090)
r4 = fsmount(r2, 0x0, 0x8)
syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r4)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000006c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r5)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffff09d2, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3f}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040080)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x4c}}, 0x8000090)

15:31:35 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x23, 0x34, @random="16186ca0fe9f64c56c79ada082761b51d3950e948bba4fd25ba4c4e7e093b8"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x54}}, 0x20000000)
socketpair(0x6, 0x0, 0x800, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x800}, @NL80211_ATTR_PMK={0x14, 0xfe, "007819aca095f4c3fbd3cb1699a5f16f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x4000841)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x21}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4e3a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff5826}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000080}, 0x40004)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0xb}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSS_BASIC_RATES={0x1b, 0x24, [{0x36, 0x1}, {0x2}, {0x48, 0x1}, {0xb}, {0x30}, {0x30}, {0xc}, {0xb}, {0x4}, {0x60}, {0x2}, {0x36}, {0x48}, {0x5, 0x1}, {0x24, 0x1}, {0x2}, {0x18, 0x1}, {0x6}, {0x30, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1b}, {0x5}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x78}, 0x1, 0x0, 0x0, 0x24000885}, 0x4008011)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
accept4(r3, 0x0, &(0x7f0000000600), 0x80000)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000640), 0x80, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x24048080)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000980)={&(0x7f0000000780), 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x15c, r0, 0x410, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0xd}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x0, 0x0, {0xe4, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x300, 0x0, 0x1}}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x12, 0x4, "076617fe37239379d493949e3858"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b6241c3bbe"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xc, 0x4, "c30258f8953b8e4a"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0xa, 0x4, "63602e6a8bed"}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "d40d2951bb2841315a33494d3d36e4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0761e0c4395e8b4f3d1dd39aac"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x11, 0x4, "527c7457902ba875be691395e6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "42925374bc5310d457fee9106f"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2d620f705a"}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000009c0), 0x50b100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000a00)={0x2, 0x9, 0xffffffff, {0x80000000}, 0x101, 0x101})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_REG_RULES={0x6c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x63d3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x35000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2b60cf00}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x801}, 0x14)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x100, &(0x7f0000000c40)={0x100075, 0x1, 0x40000, {r5}}, 0x20)
socketpair(0x27, 0x2, 0x80000000, &(0x7f0000000c80)={<r7=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000dc0), 0x8000, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x2c}}, 0x40070)

[  110.102387] audit: type=1400 audit(1745595095.686:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:31:35 executing program 4:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x48, 0x96}, 'port1\x00', 0x9, 0xc, 0xbd, 0x75, 0x72a, 0x5, 0x3, 0x0, 0x1})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x3c}}, 0x20008845)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x5a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x41}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x228}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x47}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x2d}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xef4}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xfbb4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c010}, 0x4000000)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7091310c}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044050)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x1, 0x18}, 'port0\x00', 0x30, 0x1010, 0x1, 0x1f, 0x5, 0x10000, 0x5, 0x0, 0x2, 0xf0})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000005c0)={{0x1, 0x3}, {0x2, 0x40}, 0x7f80000, 0x5})
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r2, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x4810)
socketpair(0x15, 0x6, 0xc470, &(0x7f00000007c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r4)
r5 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
r6 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x43}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008a4}, 0x80)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r3)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)

15:31:35 executing program 5:
set_thread_area(&(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x30}}, 0x4554da0b0c50684)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x810, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1ff, 0x37}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000010)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x3c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x100}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0xea9c7e530fffc7d3}, 0x4000801)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3)
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x138, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@peer_mgmt={0x75, 0x16, {0x0, 0x8001, @void, @val=0x3e, @val="2e5e62f4fe707878a1d56edb4440e600"}}, @chsw_timing={0x68, 0x4, {0x4, 0x3f}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ibss={0x6, 0x2, 0x3}, @measure_req={0x26, 0xd6, {0xc8, 0x1, 0x4, "2c4a8465f23422cbf983962614a074fb1e340e0c577610baf54c3f11245e8cb5ea2e2af432be82697593396ac06ea6115df00b20c8a8f376269b40c5ae23235210e226e3b09bb44ac1b6df300a0a059c9885bb0e0c99f3e89fb9e7f0bfa6d5a59ec21d1edf5af4a2b980fb441f3c3d0fbe0b8c65fdf9673a2ba1931b1710e0b910082df6d1590207cff1f8fa145aca9e39d3b5815b03791a14d8943db508225ff267b036fd5349979c2cbac9cb94cade02f35a71f717eab6a3a279fa41d61ea028bd1f396f666f8f2179168a2209e9b0e62115"}}, @supported_rates={0x1, 0x6, [{0x24}, {0x36}, {0x9}, {0x4, 0x1}, {0x24, 0x1}, {0x6}]}]}]}, 0x138}}, 0x4000000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r7, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8001)
socketpair(0xb, 0x3, 0x8, &(0x7f0000000a40)={<r8=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000e80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x364, r7, 0xb28, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x7ff, 0x5, 0x6, 0x0, 0x0, 0x4, 0xd68]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x6, 0x0, 0x7, 0x1, 0xc, 0x7]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x1}, {0x4, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x2}, {0x3, 0xa}, {}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x2}, {0x5}, {0x5, 0x4}, {0x2, 0x8}, {0x1, 0x8}, {}, {0x5, 0x6}, {0x7, 0x8}, {0x3, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x2, 0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x5}, {0x4}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x3, 0xa}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x5}, {0x5, 0x2}, {0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x7}, {0x4, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x8, 0x4, 0x5, 0x12, 0xb, 0x24, 0x9, 0x9, 0x16, 0x62, 0x9, 0x9, 0x36, 0x6c, 0x48, 0x1, 0x6, 0x18, 0x1, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x9}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0x8}, {0x6}, {0x1, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xa8d, 0x3, 0x8, 0x5, 0xff57, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0x7, 0x3f, 0x7, 0x4, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x18, 0x36, 0x36, 0x2, 0x9, 0x5, 0x5, 0x1, 0x6, 0xb, 0x36, 0x9, 0x18, 0x18, 0x6, 0x60]}]}]}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2bf, 0x4, 0x200, 0x2, 0x1, 0x6, 0x7, 0xae]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x60, 0x2, 0x1b, 0x9, 0x60, 0x30, 0x9, 0x16, 0x2, 0x2, 0x6c, 0x0, 0x5, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x40, 0x1, 0x401, 0x1, 0x5, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x7, 0x20, 0x2, 0x5, 0x18a7, 0x9]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x47, 0x3, 0x24, 0x18, 0x4, 0x2, 0x9, 0x16, 0x6, 0xc]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x2, 0x8}, {}, {0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x7, 0x9}, {0x2, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x9}, {0x4, 0x9}, {0x1}, {0x4}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x4, 0x2}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x4}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x5, 0x1}, {0x5}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x12, 0x6, 0x12, 0x3, 0xa, 0x3, 0x24, 0xc, 0x5, 0x36, 0x30, 0x3, 0x6c, 0x2, 0x9, 0x48, 0x1, 0x9, 0x6c, 0x6c, 0x30, 0x0, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe4e, 0x8, 0xab9, 0x0, 0xff, 0x6a30, 0x2, 0xe000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x2]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x9, 0x5, 0x40, 0x5, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x74, 0x24, 0x24, 0x18, 0x24, 0x48, 0x48, 0x22, 0x1b, 0x45, 0x36, 0x34, 0x3f, 0x18, 0x1b, 0x6c, 0x36, 0x12, 0x4, 0x4, 0x4, 0x18, 0x5, 0x12, 0x18, 0x60, 0x6, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x0, 0x60, 0x4, 0x5, 0x24, 0x60, 0x6, 0xc, 0x3, 0x36, 0x6b, 0x1b]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0xa}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x9}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x6c, 0x12, 0x30]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0xb, 0x2f, 0x3, 0x30, 0x12, 0x30, 0x24, 0x12, 0x5, 0x29, 0x0, 0x12, 0x4, 0x1b, 0x9, 0x30, 0x4, 0x36, 0x6c, 0x1, 0x4, 0x3, 0x16, 0x9, 0x48, 0x18, 0x16]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x1}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x9}, {0x6, 0x6}, {0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0xe6999f1416b3d2b, 0xb, 0x2, 0x36, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcc, 0x800, 0x400, 0x7, 0x3, 0x4, 0x1ff, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x8}, {0x4, 0x4}, {0x1}, {0x6, 0x6}, {0x6, 0xa}, {0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x7, 0x9}, {0x3, 0x4}, {0x0, 0x4}, {0x5, 0x18}, {0x7, 0x9}, {0x2}, {0x5, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x3, 0x1}, {0x4, 0x5}, {0x2, 0xa}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x4, 0x7}, {0x6, 0x7}, {0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x6}, {0x5, 0x1}]}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x27978353bf0922af, 0xb, 0x5, 0x1, 0x30, 0xc]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x36, 0xc]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x5, 0x6c, 0x5, 0x4, 0x12, 0x6c, 0xb, 0x1b, 0x3, 0x36, 0x2, 0x18, 0x24]}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4800}, 0x24040002)
sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xe0, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "18a387abd73be8e5998b745ef9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "80b8bde53f0ef5842fc12786b4ef"}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "e88028cbec21c2230ce6541b"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "63313e5b3742faaa7e8e87f40f"}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "470b8f5adc59c58294216aacd4"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ddeb4cfbb0e7ccc476876823ab"}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x40000)

15:31:35 executing program 6:
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd74}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}}, 0x480c0)
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbc3b, 0x2d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x48840)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="53c4a827ac1e"}]}, 0x48}}, 0x4000000)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10c200c}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r1, 0x38cb91cfeddbbf08, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4881)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r2, 0x408, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x72}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4a4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffff000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14004010}, 0x5)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xeb78, 0x52}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x364}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x401}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6a7}]}, 0x4c}}, 0x4084)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x23}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040841}, 0x800)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2018}, 0x4000070)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x1d4, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x8, 0x4, 0x1, 0x400, 0x0, 0x435]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x3, 0x18, 0x9, 0x22, 0x12, 0x24, 0x1b, 0xa83d0fa2baebfc0b, 0x4, 0x1b, 0x16, 0xc, 0x4, 0x2, 0x2, 0x24, 0x24]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x18, 0x2b, 0xb, 0x9, 0x18, 0x16, 0x30, 0x12, 0x5, 0x2, 0x6, 0x24, 0x60, 0x12, 0xb, 0x6c, 0x9, 0x1b, 0x1b, 0x39, 0x16, 0x18, 0x48, 0xc, 0x16, 0x1, 0x18, 0x6, 0x24, 0x36, 0x12]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa3, 0x1, 0x0, 0x3, 0xea, 0x9, 0x20]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x8}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x1}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x2, 0x3}, {0x6, 0x5}, {0x4}, {0x7, 0x8}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x5}, {0x7, 0x1}, {0x6, 0x4}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x5, 0x3}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x9}, {0x3, 0x7}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x2, 0x7}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x4, 0xa}, {0x1}, {0x6, 0x9}, {0x4, 0x1}, {0x7, 0x2}, {0x3, 0x5}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0xa}, {}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x7}, {0x5, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {}, {0x5, 0x6}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6f, 0x0, 0xc, 0x16, 0x24, 0xb, 0x12, 0x48]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x1, 0x48, 0x3, 0x12, 0xb, 0x30, 0x62, 0x18, 0xb, 0x6c]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x2}]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x3, 0x8}, {0x1, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x2, 0x1}, {0x6, 0x9}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0x5}, {0x5, 0x7}, {0x3}, {0x5, 0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0x9}, {0x7, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x5}, {0x3, 0xa}, {0x2, 0x1}, {0x6}, {0x1, 0x1}, {0x4, 0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x2}, {0x5, 0x5}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x7, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x16, 0x6c, 0x3, 0x9, 0x30, 0x16, 0x9, 0x18, 0x12, 0x5, 0x6c, 0x16, 0x5, 0x36, 0x6, 0xc, 0xb, 0xc, 0x16, 0x2, 0x3, 0x1, 0x48]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x5, 0x6, 0x3, 0x3, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x44000}, 0x8080)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x40000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r6, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x4d}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x9, 0x1, 0x5]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000015}, 0x4000)

15:31:35 executing program 7:
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc13}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x875}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40030}, 0x40)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x20000015)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c804}, 0x4004000)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3d}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0x4084)
syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
socketpair(0x2a, 0xa, 0x3, &(0x7f0000000540)={<r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x8810)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040050}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x36, 0x16}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x38}}, 0x397125b82751a4f2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x1, 0x85)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x23}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x15, 0xac, "ad110509ccc6f5d1ce9a3996e6d4e8242c"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x4}}]}, 0x4c}}, 0x40c8090)
sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r3, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4895}, 0x20000000)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0x4000, 0x0)
sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xdd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x34}}, 0x0)

[  111.402931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.410964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.416732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.426888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.433467] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.447919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.453559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.455766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.467765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.473191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.576815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.583957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.585273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.586467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.587798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.591230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.592906] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  111.608750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.610109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.619245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.628797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  111.633129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.635989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.653968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.661090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.661143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.678413] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.683744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.689071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.692344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.712806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.712803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.715402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.719115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.719149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.725041] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.745841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.761065] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.767939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  111.774662] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  113.534101] Bluetooth: hci0: command tx timeout
[  113.534111] Bluetooth: hci1: command tx timeout
[  113.661580] Bluetooth: hci5: command tx timeout
[  113.790633] Bluetooth: hci4: command tx timeout
[  113.918645] Bluetooth: hci3: command tx timeout
[  113.918783] Bluetooth: hci2: command tx timeout
[  113.919337] Bluetooth: hci7: command tx timeout
[  113.920969] Bluetooth: hci6: command tx timeout
[  115.581936] Bluetooth: hci0: command tx timeout
[  115.582429] Bluetooth: hci1: command tx timeout
[  115.709850] Bluetooth: hci5: command tx timeout
[  115.837595] Bluetooth: hci4: command tx timeout
[  115.966550] Bluetooth: hci7: command tx timeout
[  115.966951] Bluetooth: hci2: command tx timeout
[  115.967091] Bluetooth: hci6: command tx timeout
[  115.967809] Bluetooth: hci3: command tx timeout
[  117.629855] Bluetooth: hci0: command tx timeout
[  117.630343] Bluetooth: hci1: command tx timeout
[  117.757653] Bluetooth: hci5: command tx timeout
[  117.886661] Bluetooth: hci4: command tx timeout
[  118.013622] Bluetooth: hci2: command tx timeout
[  118.014097] Bluetooth: hci3: command tx timeout
[  118.014161] Bluetooth: hci7: command tx timeout
[  118.014779] Bluetooth: hci6: command tx timeout
[  119.677865] Bluetooth: hci0: command tx timeout
[  119.678344] Bluetooth: hci1: command tx timeout
[  119.805549] Bluetooth: hci5: command tx timeout
[  119.934821] Bluetooth: hci4: command tx timeout
[  120.061600] Bluetooth: hci7: command tx timeout
[  120.062078] Bluetooth: hci3: command tx timeout
[  120.063336] Bluetooth: hci2: command tx timeout
[  120.063791] Bluetooth: hci6: command tx timeout
[  171.469086] syz-executor.1 (293) used greatest stack depth: 25144 bytes left
[  171.691936] syz-executor.3 (290) used greatest stack depth: 24960 bytes left
[  173.938532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.940878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.943285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.955720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.959953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.977787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.985118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.988210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.990401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.005950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.008975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.011666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.017181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.018802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.024980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.039198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.051397] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.054192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.067070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.072849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.130409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.137920] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.152840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.161954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.164086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.166759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  174.168950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  174.175734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.179915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.185310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  174.197823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.206444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.208347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.217550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.218930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  174.274950] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  174.276908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  174.279433] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  174.284411] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  174.287130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.061584] Bluetooth: hci1: command tx timeout
[  176.062607] Bluetooth: hci0: command tx timeout
[  176.126867] Bluetooth: hci2: command tx timeout
[  176.190340] Bluetooth: hci3: command tx timeout
[  176.253610] Bluetooth: hci4: command tx timeout
[  176.254223] Bluetooth: hci5: command tx timeout
[  176.317655] Bluetooth: hci7: command tx timeout
[  176.317699] Bluetooth: hci6: command tx timeout
[  178.109942] Bluetooth: hci0: command tx timeout
[  178.110738] Bluetooth: hci1: command tx timeout
[  178.173576] Bluetooth: hci2: command tx timeout
[  178.237574] Bluetooth: hci3: command tx timeout
[  178.302774] Bluetooth: hci5: command tx timeout
[  178.303377] Bluetooth: hci4: command tx timeout
[  178.365574] Bluetooth: hci7: command tx timeout
[  178.366819] Bluetooth: hci6: command tx timeout
[  180.157766] Bluetooth: hci1: command tx timeout
[  180.158586] Bluetooth: hci0: command tx timeout
[  180.221580] Bluetooth: hci2: command tx timeout
[  180.285855] Bluetooth: hci3: command tx timeout
[  180.349723] Bluetooth: hci5: command tx timeout
[  180.351016] Bluetooth: hci4: command tx timeout
[  180.416609] Bluetooth: hci6: command tx timeout
[  180.417051] Bluetooth: hci7: command tx timeout
[  182.207751] Bluetooth: hci0: command tx timeout
[  182.208109] Bluetooth: hci1: command tx timeout
[  182.270608] Bluetooth: hci2: command tx timeout
[  182.334563] Bluetooth: hci3: command tx timeout
[  182.398654] Bluetooth: hci4: command tx timeout
[  182.398801] Bluetooth: hci5: command tx timeout
[  182.463636] Bluetooth: hci7: command tx timeout
[  182.463791] Bluetooth: hci6: command tx timeout
[  233.952730] syz-executor.2 (2806) used greatest stack depth: 24704 bytes left
[  236.133762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.141626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  236.147045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  236.151525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.154118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.162416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  236.171634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  236.182412] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.193221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  236.199975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.260638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.271043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.274838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.282131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.290284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.391414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.399231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.413223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.426696] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.436273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.468899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.502168] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.543810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.557457] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.566952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.587392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.595978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.600095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.628429] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.648131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  236.653434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.684968] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.692745] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.705986] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.712873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.719233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.723896] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.761141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.762773] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.779519] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.270713] Bluetooth: hci1: command tx timeout
[  238.272686] Bluetooth: hci0: command tx timeout
[  238.397748] Bluetooth: hci2: command tx timeout
[  238.654056] Bluetooth: hci3: command tx timeout
[  238.655433] Bluetooth: hci4: command tx timeout
[  238.717714] Bluetooth: hci5: command tx timeout
[  238.845659] Bluetooth: hci6: command tx timeout
[  238.846840] Bluetooth: hci7: command tx timeout
[  240.317984] Bluetooth: hci1: command tx timeout
[  240.319082] Bluetooth: hci0: command tx timeout
[  240.446171] Bluetooth: hci2: command tx timeout
[  240.702320] Bluetooth: hci4: command tx timeout
[  240.704411] Bluetooth: hci3: command tx timeout
[  240.766700] Bluetooth: hci5: command tx timeout
[  240.893650] Bluetooth: hci6: command tx timeout
[  240.894579] Bluetooth: hci7: command tx timeout
[  242.366566] Bluetooth: hci0: command tx timeout
[  242.367567] Bluetooth: hci1: command tx timeout
[  242.494226] Bluetooth: hci2: command tx timeout
[  242.750125] Bluetooth: hci3: command tx timeout
[  242.751792] Bluetooth: hci4: command tx timeout
[  242.813787] Bluetooth: hci5: command tx timeout
[  242.941665] Bluetooth: hci6: command tx timeout
[  242.943321] Bluetooth: hci7: command tx timeout
[  244.414158] Bluetooth: hci1: command tx timeout
[  244.414746] Bluetooth: hci0: command tx timeout
[  244.542672] Bluetooth: hci2: command tx timeout
[  244.797713] Bluetooth: hci4: command tx timeout
[  244.798270] Bluetooth: hci3: command tx timeout
[  244.861820] Bluetooth: hci5: command tx timeout
[  244.989722] Bluetooth: hci7: command tx timeout
[  244.990253] Bluetooth: hci6: command tx timeout
[  298.514293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.522098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.526350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.543159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.553192] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.715462] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.726118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.733058] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.743795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.752206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.988394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.001404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.033848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.045446] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.059705] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.070009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.073255] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.078053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.079824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.081275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.083921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.086185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.089932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  299.096173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.097762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.099046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.102581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.104506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.106003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.114555] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.131961] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.134212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.148446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  299.150222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  299.161389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.176932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.178556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.200019] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.220812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.253638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.606734] Bluetooth: hci0: command tx timeout
[  300.798551] Bluetooth: hci1: command tx timeout
[  301.182564] Bluetooth: hci5: command tx timeout
[  301.245669] Bluetooth: hci3: command tx timeout
[  301.309569] Bluetooth: hci7: command tx timeout
[  301.310645] Bluetooth: hci4: command tx timeout
[  301.501731] Bluetooth: hci6: command tx timeout
[  301.629907] Bluetooth: hci2: command tx timeout
[  302.654007] Bluetooth: hci0: command tx timeout
[  302.847604] Bluetooth: hci1: command tx timeout
[  303.229761] Bluetooth: hci5: command tx timeout
[  303.293601] Bluetooth: hci3: command tx timeout
[  303.357911] Bluetooth: hci7: command tx timeout
[  303.358771] Bluetooth: hci4: command tx timeout
[  303.549768] Bluetooth: hci6: command tx timeout
[  303.677867] Bluetooth: hci2: command tx timeout
[  304.701711] Bluetooth: hci0: command tx timeout
[  304.893542] Bluetooth: hci1: command tx timeout
[  305.278512] Bluetooth: hci5: command tx timeout
[  305.341763] Bluetooth: hci3: command tx timeout
[  305.405566] Bluetooth: hci7: command tx timeout
[  305.406012] Bluetooth: hci4: command tx timeout
[  305.597547] Bluetooth: hci6: command tx timeout
[  305.726641] Bluetooth: hci2: command tx timeout
[  306.750711] Bluetooth: hci0: command tx timeout
[  306.941956] Bluetooth: hci1: command tx timeout
[  307.325578] Bluetooth: hci5: command tx timeout
[  307.390685] Bluetooth: hci3: command tx timeout
[  307.453641] Bluetooth: hci7: command tx timeout
[  307.454106] Bluetooth: hci4: command tx timeout
[  307.646524] Bluetooth: hci6: command tx timeout
[  307.773727] Bluetooth: hci2: command tx timeout
[  358.934781] syz-executor.3 (7773) used greatest stack depth: 24648 bytes left
[  361.106197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.110645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.116701] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.131289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.137323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.188698] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.192763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.201422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.207264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.216305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.297223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.324577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.330039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.363349] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.369996] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.372286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.390967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.401294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.449408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.478040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.502085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.516957] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.518853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.536940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.559417] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.562260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.582131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.586120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.600127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.605771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.608058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.611416] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.625189] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.628292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.642050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.663222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.681966] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.705969] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.735231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.750584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.197806] Bluetooth: hci0: command tx timeout
[  363.261816] Bluetooth: hci1: command tx timeout
[  363.453870] Bluetooth: hci2: command tx timeout
[  363.581837] Bluetooth: hci3: command tx timeout
[  363.710617] Bluetooth: hci4: command tx timeout
[  363.775298] Bluetooth: hci6: command tx timeout
[  363.837544] Bluetooth: hci5: command tx timeout
[  363.902590] Bluetooth: hci7: command tx timeout
[  365.246509] Bluetooth: hci0: command tx timeout
[  365.309893] Bluetooth: hci1: command tx timeout
[  365.501812] Bluetooth: hci2: command tx timeout
[  365.630517] Bluetooth: hci3: command tx timeout
[  365.758700] Bluetooth: hci4: command tx timeout
[  365.822578] Bluetooth: hci6: command tx timeout
[  365.885802] Bluetooth: hci5: command tx timeout
[  365.950852] Bluetooth: hci7: command tx timeout
[  367.293616] Bluetooth: hci0: command tx timeout
[  367.357539] Bluetooth: hci1: command tx timeout
[  367.549570] Bluetooth: hci2: command tx timeout
[  367.678525] Bluetooth: hci3: command tx timeout
[  367.806693] Bluetooth: hci4: command tx timeout
[  367.869539] Bluetooth: hci6: command tx timeout
[  367.935149] Bluetooth: hci5: command tx timeout
[  367.999592] Bluetooth: hci7: command tx timeout
[  369.341728] Bluetooth: hci0: command tx timeout
[  369.406557] Bluetooth: hci1: command tx timeout
[  369.597538] Bluetooth: hci2: command tx timeout
[  369.726555] Bluetooth: hci3: command tx timeout
[  369.854764] Bluetooth: hci4: command tx timeout
[  369.917569] Bluetooth: hci6: command tx timeout
[  369.981554] Bluetooth: hci5: command tx timeout
[  370.045519] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
15:36:37  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff888028d37ce0 RCX=ffffffff819ec1ac RDX=ffff888034405340
RSI=ffffffff819ec1ba RDI=0000000000000007 RBP=0000000000000000 RSP=ffff888028d37808
R8 =0000000000000000 R9 =fffff9400036753e R10=ffffffffffffffff R11=0000000000000000
R12=ffffffffffffffff R13=0000000000000001 R14=ffff888028d37ce0 R15=ffff888028d379c8
RIP=ffffffff8172ebab RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe2500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffb9735e6f4 CR3=000000002b7b4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007ffb9736d47000007ffb9736cf20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=08ceeec3ed70d47e RDX=ffffffff813508c9
RSI=00000000e49da119 RDI=000000009362d616 RBP=ffff888034c7f6e0 RSP=ffff888034c7f5c8
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000006b5c
R12=0000000000000000 R13=ffff888034c7f6d0 R14=ffff888034c7f6d0 R15=ffff888034c7f688
RIP=ffffffff813508e3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f048f6e06f4 CR3=000000002be48000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f048f6ef47000007f048f6eef20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000