Warning: Permanently added '[localhost]:33762' (ECDSA) to the list of known hosts.
2025/04/30 14:56:26 fuzzer started
2025/04/30 14:56:27 dialing manager at localhost:46073
syzkaller login: [  105.823054] cgroup: Unknown subsys name 'net'
[  105.966060] cgroup: Unknown subsys name 'cpuset'
[  106.014362] cgroup: Unknown subsys name 'rlimit'
2025/04/30 14:56:48 syscalls: 212
2025/04/30 14:56:48 code coverage: enabled
2025/04/30 14:56:48 comparison tracing: enabled
2025/04/30 14:56:48 extra coverage: enabled
2025/04/30 14:56:48 setuid sandbox: enabled
2025/04/30 14:56:48 namespace sandbox: enabled
2025/04/30 14:56:48 Android sandbox: enabled
2025/04/30 14:56:48 fault injection: enabled
2025/04/30 14:56:48 leak checking: enabled
2025/04/30 14:56:48 net packet injection: enabled
2025/04/30 14:56:48 net device setup: enabled
2025/04/30 14:56:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/30 14:56:48 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/30 14:56:48 USB emulation: enabled
2025/04/30 14:56:48 hci packet injection: enabled
2025/04/30 14:56:48 wifi device emulation: enabled
2025/04/30 14:56:48 802.15.4 emulation: enabled
2025/04/30 14:56:48 fetching corpus: 0, signal 0/0 (executing program)
2025/04/30 14:56:49 starting 8 fuzzer processes
14:56:49 executing program 0:
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x20})
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000040))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}, @NL80211_ATTR_PMKID={0x14, 0x55, "870e5c65ac661eaeb696f3083d681bae"}, @NL80211_ATTR_PMKID={0x14, 0x55, "ea547bc73e583557c0919395650ff7c5"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000045}, 0xf999a65d3a61e746)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000380)={'virt_wifi0\x00'})
recvmsg(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000003c0)=@alg, 0x80, &(0x7f0000001740)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x5, &(0x7f00000017c0)=""/55, 0x37}, 0x11000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001840))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001880)='./binderfs/custom1\x00', 0x1000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x41000001}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x22}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0xc0c0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000001a00), 0xffffffffffffffff)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000001a40)='veth1_virt_wifi\x00')
r4 = accept4(0xffffffffffffffff, &(0x7f0000001a80)=@caif=@rfm, &(0x7f0000001b00)=0x80, 0x80800)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000001b40)='veth0_to_bridge\x00')
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000001b80)={{r4}, {@val, @actul_num={@void, 0x40, 0x67}}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001bc0)={'wg2\x00'})

14:56:49 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfff, 0x149800)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040))
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080))
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x20c01)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100))
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000140)={0xe4c})
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x20, 0x1f, 0x45]}, &(0x7f0000000200)=0x44)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0xd0, "2b2d6100358dd9790b911da7d2d657a5481c0b0a60d100bf3ee4feaf1753e2c8636e8ad4971bf5221a4944a799c57b86c756f8914a8ea0aee7f353aa6ccdad72fa81b4766dd86c3742143ddcf5ae62c8d738335b4035ff16fcc424f19281efdf837e685f6038c62ce2e2939a168ecdbd7f78944fb148678b0c3822bd16b3517ab24fa6e17d10da3816c2d4afba6a602545cc5f93982f02f13c021f43f1fac8243d6a2e43d683983796dc7f7c27b3b38f51ddf0c3620994865df96872f8c00fc04222cd459c7a5009aa35f1f8ef5c3c83"}, &(0x7f0000000340)=0xf4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000380)=0x1, 0x4)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x279d163e3458d07, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000400)={0x95, 0x80})
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000440))
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000500)=0x18, &(0x7f0000000540)=0x2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1a4, r3, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x154, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x1, @val=0x200, @void, @void}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x1}}, @measure_req={0x26, 0x9d, {0x57, 0x5, 0x3, "4119746cf418f4075a0b8fa248b632854cd5f340501ca964e88b298df6a9d63f2c0f310d22f8698cdea3393d58b5784e25d26d977d4700f578ff90facccd8df40adb1e38d56d14a03f5858f0a3cb61f95d67a414b507538061ae8abf8bfe30a574780cece8812be9d5b74deb4b24e6928707f027c6edfb7787dda531f4c4fd3ebfba53f9b4639245b7e52a9c2df0aa97b388e015646019619922"}}, @tim={0x5, 0x77, {0x0, 0xc6, 0x2, "1eaa182881144ca51ff756dfcbb0ff006aa94b93e6660a89d53a6f3acf8badd189334d43750096a1c2a69f81a16b1c63816ef24a71cdffa2015ac8c9eb409ef3a81143c05132df872a8ed4c49d4c74f833a5e08ef0e640e8f3ca1eee2fe8062d5b8e254d51962a0acc45810c5b3584c6c60dbd63"}}, @prep={0x83, 0x25, @ext={{}, 0x4, 0xf9, @broadcast, 0x1, @device_b, 0xffff0001, 0x4, @device_b, 0x4}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000840))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'})
ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000008c0)=0xb82)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000900)={{0x2, 0x4e20, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0xc, {0x2, 0x4e23, @empty}, 'virt_wifi0\x00'})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000009c0)={0x38b7, 0x8})

14:56:49 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0xffff}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1ff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0xd0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fd5f671a5a4a27446e2e099d211b2f4a6e5cd651c71fdd1e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "962cc197cc4d5664e31bb6adc403ef43680b9f47991fc94a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3863c4d7f552c807bc229cb7853d4dc59ca1a6914dbef5c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de585f0ecf7d2dd31a5a8c3461b050bd9cef481c84bb603"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c45f740cb73c36cd417620bb4cc7fda05ac947ee23e6cb27"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x124}, 0x1, 0x0, 0x0, 0x24040894}, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb4, 0x5f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40081)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x52}, @void, @val={0xc, 0x99, {0x401, 0x69}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x20024090)
r3 = accept4(r1, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f00000005c0)=0x80, 0xc00)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000600)=""/81, &(0x7f0000000680)=0x51)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000006c0)=""/99)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000f80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f00000007c0)={0x748, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2b4, 0x11d, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x6}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x7}, {0x7}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0x7}, {0x5, 0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x6}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0xa}, {0x5, 0x6}, {0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x1, 0x6, 0x0, 0x1b, 0x16, 0x2, 0x12, 0x5, 0x3, 0x4, 0xb, 0x36, 0x4, 0xc, 0x60, 0x3, 0x16, 0x1, 0x1, 0x16, 0x5, 0x9, 0x16, 0x1, 0x12, 0x7e, 0x5]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x9}, {0x4, 0x9}, {0x5, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x2}, {0x5, 0x5}, {0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0x8}, {0x2, 0x3}, {0x7, 0x7}, {0x7}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x2}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x36, 0x2, 0x12, 0x5, 0x30, 0x16, 0xb, 0x16, 0x3, 0x60, 0x12, 0x16, 0x16, 0x1b, 0x12, 0x4, 0x5, 0x12, 0x24, 0xb, 0x30, 0x9, 0x5, 0x3, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xbb8, 0x4f23, 0x2800, 0x91, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xbb45, 0x1f, 0x100, 0xffff, 0x800, 0x3f, 0x4]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x8}, {0x0, 0x18}, {0x4, 0x8}, {0x5, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x3}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x7, 0x1a}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x7}, {0x5, 0x1}, {0x7, 0x4}, {0x7, 0x1}, {0x3, 0x8}, {0x1, 0x9}, {0x5, 0x5}, {0x7, 0x1}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x6}, {}, {0x6, 0x6}, {0x4, 0x7}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {}, {0x3, 0x7}, {0x3}, {0x4, 0x6}, {0x3}]}]}, @NL80211_BAND_60GHZ={0x100, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x5}, {0x4, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x4, 0x7}, {0x3, 0x7}, {0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0xa}, {0x5, 0xa}, {}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x7, 0x1}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x6}, {0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0xa}, {0x5, 0x8}, {}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x2}, {0x6, 0x4}, {0x1}, {0x3, 0x3}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x7}, {0x1, 0x6}, {0x6}, {0x1, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x6c, 0xc, 0x1b, 0xc, 0x16, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xc8c9, 0x6, 0x5, 0x64, 0x2, 0x4, 0xe38]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0xb, 0x1b, 0x36, 0x2, 0x4, 0x30, 0x30, 0x4, 0x3c, 0x25f2659d0b4df4a6, 0x67, 0x0, 0x5, 0x12, 0x6, 0x3, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x14, 0x1b]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0xb, 0x36, 0x5, 0x1b, 0x24, 0x30, 0x6, 0x48, 0xc, 0x1b, 0x18, 0x375789ad12c6abe9, 0x1b, 0x36, 0x1b, 0x36, 0x2, 0x4, 0x1c]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x2}, {0x7, 0x9}, {}, {0x6, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0xa}, {0x3, 0x3}, {0x5, 0x5}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x4}, {0x5, 0x2}, {}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x5}, {0x1}, {0x0, 0x6}, {0x2, 0x4}, {0x6, 0x4}, {0x6, 0x1}, {0x1}, {0x2, 0x4}, {0x3, 0x3}, {0x5, 0x8}, {0x5, 0x3}, {0x6, 0x8}, {0x3, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x9}, {0x6, 0x8}, {0x3, 0x6}, {0x6, 0x8}, {0x6}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x2, 0x7}, {0x5, 0x6}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x0, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0x330, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdba, 0x2, 0xffff, 0x3, 0x6, 0x7, 0xd6, 0x1000]}}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x2, 0xd, 0x3, 0x1, 0x1, 0x16, 0x0]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x16, 0x5, 0x9, 0x5, 0xc, 0x0, 0x5, 0x2, 0x48, 0x9, 0xb, 0x48, 0xc, 0x6c, 0x24, 0x12, 0x2, 0x12, 0x12, 0x9, 0x3, 0x24, 0x1, 0x60, 0x2, 0x1, 0x1b]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0xb, 0x1, 0x1b, 0x68, 0x5, 0x16, 0x4, 0x18, 0x24, 0x12, 0x6, 0x3, 0x18, 0x9]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x1}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x3}, {0x3, 0xa}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x9}, {}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1f, 0x6, 0x9, 0x63, 0x5, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8527, 0x100, 0xfff, 0x8, 0x5, 0x1, 0x3, 0x9]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x100, 0x3, 0x0, 0x1, 0x6, 0x800, 0x7f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x18, 0xc, 0x60, 0x24, 0x3, 0x16, 0x18, 0xb, 0xc, 0x1b, 0x4, 0xb, 0x60, 0x6, 0x2b, 0x30, 0x48, 0x9, 0x1b]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4}, {0x1, 0x3}, {0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x2}, {0x0, 0x6}, {0x3, 0x4}]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x1}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x4}, {0x2}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0xa}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x5, 0xe}, {0x1, 0x4}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x6}, {0x4, 0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x2, 0x4}, {}, {0x6, 0x4}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x1}, {0x1}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x9}, {0x1, 0x8}, {0x4, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0xc, 0x367b0d2fa0cb2986, 0x3b, 0x5, 0x4, 0x6c, 0x1, 0x9, 0x30, 0x2, 0x48, 0x2, 0x24, 0x1b, 0x3, 0x2, 0xb, 0x5, 0x5, 0x3, 0x2, 0xb, 0x2, 0x6c, 0xb, 0x4, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xff, 0x5, 0x7, 0xfffd, 0x6, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0xff, 0x339, 0x5, 0x6, 0x100, 0x8]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0xc, 0x9]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xab4bc139d6302265, 0x60, 0x2, 0x48, 0x2, 0x6, 0x5, 0x18, 0x30, 0x18, 0xb, 0x3, 0x60, 0x6, 0x1b, 0x18, 0x48, 0x6c, 0x5, 0x48, 0x6c, 0x9, 0x30, 0xc, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x5, 0x4, 0x9, 0x5, 0xfffe, 0x7, 0x4]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x2}, {0x2, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x7, 0x8}, {0x2, 0x8}, {0x5, 0x4}, {0x2, 0x5}, {0x6, 0x7}, {0x2, 0x7}, {0x3, 0xa}, {0x1, 0x6}, {0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x4}, {0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0x5}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x1}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0xa}, {0x4, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x7}, {0x0, 0x2}, {0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x4}, {}, {0x0, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x2, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x3, 0x6, 0x81, 0x1ff, 0x7, 0x69]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x8}, {0x7}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x5, 0x7}, {}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x2}, {0x2, 0x3}, {0x7, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x5}, {0x4}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x6, 0x9}, {0x3}, {0x6, 0x8}, {0x1}, {0x3, 0x5}, {}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x7, 0x4}, {0x2, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x3, 0x5}, {0x3, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x7}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x7}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x9}, {0x3, 0x8}, {0x1}, {0x5, 0x9}, {0x5, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0x9}, {0x4, 0x5}, {0x7, 0x6}, {0x5, 0x5}, {0x5, 0xa}, {0x6, 0x9}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x5, 0x1}, {0x2, 0x5}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x1}, {0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x2, 0x7}, {0x4, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x18}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x14c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffff708}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x760}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x5, 0x48, 0xb, 0x18, 0x24, 0x18, 0x7a, 0x6, 0xb, 0x1e, 0xf218001c773e0643, 0x1b, 0x0, 0x6c, 0x18, 0x18, 0xb, 0x1, 0x18, 0x16, 0x6c, 0x4, 0x30, 0x3, 0x5, 0x6c, 0xb, 0x5, 0xb, 0x48, 0x1b]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x9, 0x4, 0x3, 0x4, 0x6c, 0xc, 0x0, 0x12, 0x0, 0xc, 0xb, 0x3, 0x6, 0x1d, 0x9, 0x30, 0x48, 0xc, 0x30, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x8, 0x8000, 0xa0, 0x3, 0x26d4, 0x1e10]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7ff, 0x9, 0x3, 0x0, 0x80, 0x6a4a, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x65}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x79}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x748}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = accept(r4, &(0x7f0000000fc0)=@qipcrtr, &(0x7f0000001040)=0x80)
sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x81)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000001280)=0x3, 0x4)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001480), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000016c0)={0xcc, 0x0, &(0x7f0000001580)=[@free_buffer, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x8, 0x0, 0x3f}, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_handle={0x77682a85, 0x100b}}, &(0x7f0000001340)={0x0, 0x20, 0x38}}}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x0, &(0x7f0000001380)=""/251, 0xfb, 0x1, 0x39}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000001540)={0x0, 0x28, 0x48}}, 0x1000}, @dead_binder_done, @increfs_done={0x40106308, 0x1}, @register_looper], 0x22, 0x0, &(0x7f0000001680)="ad7761ca9d4f32e159d44e230347cdd0e6fc6a920ebf98b5ad332cf88a461eb4b7cc"})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff)

14:56:49 executing program 3:
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x3, 0x80, [0x2, 0x2, 0xffffffff, 0x778, 0x3, 0x2], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/128}, &(0x7f0000000140)=0x78)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x10000, {{0x2, 0x4e20, @remote}}}, 0x88)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000240)={{0x62, @private=0xa010100, 0x4e23, 0x4, 'lblc\x00', 0x0, 0x2, 0x1d}, {@loopback, 0x4e24, 0x1, 0x5, 0xde8, 0xeccd}}, 0x44)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x5, "c62f30e87f"}, &(0x7f0000000300)=0x29)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x0, [0x4040, 0x7, 0x1000]}, &(0x7f00000003c0)=0x44)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001480)={'broute\x00', 0x0, 0x3, 0x1000, [0x8, 0xcab, 0x4bbb, 0xd52, 0x3, 0x7], 0x5, &(0x7f0000000400)=[{}, {}, {}, {}, {}], &(0x7f0000000480)=""/4096}, &(0x7f0000001500)=0x78)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'wg2\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x5c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x800)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000001700)={0x9, 0x1}, 0x2)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000001740)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14, {0x2, 0x4e24, @rand_addr=0x64010102}, 'gre0\x00'})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000017c0)=""/236, &(0x7f00000018c0)=0xec)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001940)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6d}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6e}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001a40)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001a80)={<r4=>0x0, "b3f79e78a75974c72a07813c572bd338"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000002a80)={r4, 0xff, 0xfffffffffffff964, 0x1})
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000002e80)=""/37, &(0x7f0000002ec0)=0x25)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x23}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x44}}, 0xc082)

[  128.468189] audit: type=1400 audit(1746025009.895:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:56:49 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000))
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000340), 0x8, 0x84200)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000380)=<r3=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000003c0)={{r2}, r3, 0xa, @unused=[0x40, 0xffffffffffffffc8, 0x477, 0x10001], @subvolid=0x1})
r4 = mq_open(&(0x7f00000013c0)='/dev/loop#\x00', 0x800, 0x286, &(0x7f0000001400)={0x6367, 0x0, 0x2, 0x3})
clock_gettime(0x0, &(0x7f0000001480)={<r5=>0x0, <r6=>0x0})
mq_timedsend(r4, &(0x7f0000001440)="68cee777", 0x4, 0x3, &(0x7f00000014c0)={r5, r6+60000000})
r7 = semget$private(0x0, 0x2, 0x100)
semtimedop(r7, &(0x7f0000001500)=[{0x4, 0x4}, {0x2, 0x5, 0x1800}, {0x2, 0x1, 0x1000}, {0x2, 0x1, 0x1000}], 0x4, &(0x7f0000001540)={0x77359400})
r8 = semget$private(0x0, 0x0, 0x282)
clock_gettime(0x0, &(0x7f00000015c0)={<r9=>0x0, <r10=>0x0})
semtimedop(r8, &(0x7f0000001580)=[{0x0, 0x4, 0x800}, {0x4, 0x1, 0x1000}, {0x2, 0x8, 0x1000}, {0x3, 0x1f, 0x800}, {0x3, 0x10}, {0x2, 0x100, 0x800}, {0x2, 0x800, 0x800}, {0x3, 0x400, 0x800}, {0x2, 0x4, 0x1800}], 0x9, &(0x7f0000001600)={r9, r10+10000000})
semtimedop(r7, &(0x7f0000001640)=[{0x1, 0x3, 0x1c00}], 0x1, &(0x7f0000001680))
recvmsg(r1, &(0x7f00000028c0)={&(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, <r11=>0xffffffffffffffff}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/33, 0x21}], 0x2, &(0x7f00000027c0)=""/228, 0xe4}, 0x2002)
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x21169a12}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4000004)
semtimedop(r7, &(0x7f0000002a40)=[{0x3, 0x1ff, 0x800}, {0x4, 0x8000}, {0x1, 0x1ff, 0x1800}, {0x2, 0x1, 0x1000}, {0x3, 0xdb, 0x800}], 0x5, &(0x7f0000002a80)={0x77359400})
semtimedop(r7, &(0x7f0000002ac0)=[{0x2, 0xfff, 0x3800}, {0x2, 0xe}, {0x1, 0x4, 0xd19c4bd9022c4033}, {0x2, 0x0, 0x1800}, {0x1, 0x6, 0x800}], 0x5, &(0x7f0000002b00)={0x77359400})

14:56:49 executing program 6:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x24018040}, 0x40)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000a00)=@x25, &(0x7f0000000a80)=0x80, 0x80000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3f, 0x1f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r3 = syz_open_dev$hidraw(&(0x7f0000000c00), 0xfffffffffffffffa, 0x98040)
ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000c40)={{r1}, {@val, @max}})
r4 = pidfd_open(0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c73052c386df0731728be0168ec316bf1cb62f6f5b5f4e08"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8090)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r5, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x19}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x24004881)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x40045}, 0x800)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x6c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3e8, 0x73}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0xa}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x2}, {0x5, 0x5}, {0x1, 0x8}, {0x7, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x6}, {0x4, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x3}, {0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x9}, {0x2, 0x2}, {0x3, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x8}, {0x3, 0x1}, {0x5, 0x3}, {0x1, 0x7}, {0x7, 0x6}, {0x4, 0x7}]}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000011}, 0x10)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x4c, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r7 = accept(0xffffffffffffffff, &(0x7f0000001300)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000001380)=0x80)
getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f00000013c0), &(0x7f0000001400)=0xc)

14:56:50 executing program 7:
msgget$private(0x0, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '@l)*!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "198de0cfa9d0e358ed6565fe1d563b60cc3ed571037ae569838fc5cb6f3aa6a8"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x57ec}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000051)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x58, 0xbe, "e7ddd55cc99d432480b608ec06197edb5fc646a7f87a28e79a69d33e145d688f4b18fcfec5458fa8a010140937512669fbd0d049df9c54f117fedc8faee8cfdbbb7a174b645e55bda00ec55ca7376452e2a74d45"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x91)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
r2 = getpid()
r3 = clone3(&(0x7f00000008c0)={0x20000000, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0), {0x19}, &(0x7f0000000800)=""/8, 0x8, &(0x7f0000000840)=""/33, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
r4 = getpid()
clone3(&(0x7f0000000b80)={0x20808080, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)=<r5=>0x0, {0x26}, &(0x7f0000000a00)=""/68, 0x44, &(0x7f0000000a80)=""/132, &(0x7f0000000b40)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58)
clone3(&(0x7f0000000c40)={0x3080c080, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x17}, &(0x7f0000000600)=""/88, 0x58, &(0x7f0000000680)=""/175, &(0x7f0000000c00)=[0x0, r2, 0xffffffffffffffff, 0x0, r3, 0x0, r4, 0x0, r5], 0x9}, 0x58)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000dc0)=@get={0x1, &(0x7f0000000cc0)=""/239, 0x2})
getpid()
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200042}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x53ae, 0x77}}}}, ["", ""]}, 0x20}}, 0x40815)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x34}, @void, @val={0xc, 0x99, {0x6, 0x41}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0xc0c1)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x40}, 0x1, 0x0, 0x0, 0x40084}, 0x4000)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000)

14:56:50 executing program 4:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'batadv0\x00', {'wlan0\x00'}, 0xe9})
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0xc004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb2, 0x22}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r1 = accept(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x80)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x500, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4048080)
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000500)={{r2}, 0x0, 0x0, @inherit={0x78, &(0x7f0000000480)={0x1, 0x6, 0x7, 0x8, {0x2, 0x4, 0x0, 0x4, 0x1}, [0x2, 0x50815be4, 0x81, 0x4a, 0x9, 0x2]}}, @subvolid=0x5})
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000001500)={0x75, 0xa4, 0x2, 0x4})
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc1}, 0x20040004)
r4 = accept(r2, &(0x7f0000001680)=@isdn, &(0x7f0000001700)=0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendto(r7, &(0x7f0000001780)="9aca797fdf07235ee5826c71ae016c8dbec67530a8bb6c7f84ecfb6f71ebf147eee56170ca59d24a5203d24817f8edbbe81764d184f53fba521ed95ad02372374660371adc4d4fce4482b221ddd89734c31a2d862eed00185282d87b9e6297c7a94b87a4", 0x64, 0x44, &(0x7f0000001800)=@hci={0x1f, 0xffffffffffffffff}, 0x80)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x70, r5, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x6b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7891711f5870c1aa3d74a74108e5492e929ac6d05eec33"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}]}, 0x70}}, 0x800)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4050)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000001ac0)={'filter\x00', 0x36, "e0f5f3b95989316243b716d803a6e2630a030bea028741b8202956755d32768cd540933f39185139477d5f0b39d3e80a94342c2ea55d"}, &(0x7f0000001b40)=0x5a)
r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r8, 0x401870cc, &(0x7f0000001b80)={0x7, 0x3, 0x365, 0x80000000})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000084fc0)={0x0, [], 0x9, "9030015fb58a83"})

[  129.842500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.843946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  129.849449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.850385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  129.855608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  129.856425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.862044] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  129.863552] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.866449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.867713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  129.946774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  129.952507] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  129.960742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  129.965570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  129.972531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.972565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  129.976490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.981673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.001701] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.005001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.008593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.010051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.012938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.035090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.041350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.042585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.054446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.077330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.090320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.093647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.094794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  130.105349] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  130.118346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  130.163040] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  130.167266] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  130.360003] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  130.371596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  130.390796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  130.444463] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  130.457607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  131.903006] Bluetooth: hci0: command tx timeout
[  131.903574] Bluetooth: hci1: command tx timeout
[  132.095286] Bluetooth: hci4: command tx timeout
[  132.096003] Bluetooth: hci3: command tx timeout
[  132.096313] Bluetooth: hci2: command tx timeout
[  132.158498] Bluetooth: hci5: command tx timeout
[  132.222261] Bluetooth: hci6: command tx timeout
[  132.542405] Bluetooth: hci7: command tx timeout
[  133.951255] Bluetooth: hci1: command tx timeout
[  133.951881] Bluetooth: hci0: command tx timeout
[  134.142257] Bluetooth: hci2: command tx timeout
[  134.143238] Bluetooth: hci3: command tx timeout
[  134.143710] Bluetooth: hci4: command tx timeout
[  134.208361] Bluetooth: hci5: command tx timeout
[  134.270510] Bluetooth: hci6: command tx timeout
[  134.590406] Bluetooth: hci7: command tx timeout
[  135.998619] Bluetooth: hci1: command tx timeout
[  135.999146] Bluetooth: hci0: command tx timeout
[  136.191072] Bluetooth: hci4: command tx timeout
[  136.191514] Bluetooth: hci3: command tx timeout
[  136.191904] Bluetooth: hci2: command tx timeout
[  136.255069] Bluetooth: hci5: command tx timeout
[  136.318247] Bluetooth: hci6: command tx timeout
[  136.638240] Bluetooth: hci7: command tx timeout
[  138.046386] Bluetooth: hci0: command tx timeout
[  138.046446] Bluetooth: hci1: command tx timeout
[  138.238342] Bluetooth: hci2: command tx timeout
[  138.239629] Bluetooth: hci3: command tx timeout
[  138.240092] Bluetooth: hci4: command tx timeout
[  138.302786] Bluetooth: hci5: command tx timeout
[  138.366258] Bluetooth: hci6: command tx timeout
[  138.686339] Bluetooth: hci7: command tx timeout
[  192.521851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.527656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.532686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  192.533892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.535594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  192.537506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  192.544527] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.550087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  192.552418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  192.559310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  192.563967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  192.574076] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  192.596726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  192.606878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  192.624101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  192.628816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  192.653671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  192.657698] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  192.664814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  192.667306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.678044] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  192.682429] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  192.684059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  192.695145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  192.697046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  192.705274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  192.708389] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  192.710998] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  192.727297] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  192.729119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  192.799432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  192.805779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  192.807886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  192.812130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  192.819833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  192.917919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  192.972082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  192.986580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.003627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.010521] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.622320] Bluetooth: hci1: command tx timeout
[  194.623308] Bluetooth: hci0: command tx timeout
[  194.750600] Bluetooth: hci2: command tx timeout
[  194.750667] Bluetooth: hci3: command tx timeout
[  194.751545] Bluetooth: hci6: command tx timeout
[  194.816352] Bluetooth: hci7: command tx timeout
[  194.878405] Bluetooth: hci5: command tx timeout
[  195.070634] Bluetooth: hci4: command tx timeout
[  196.670518] Bluetooth: hci1: command tx timeout
[  196.672275] Bluetooth: hci0: command tx timeout
[  196.798549] Bluetooth: hci6: command tx timeout
[  196.799837] Bluetooth: hci2: command tx timeout
[  196.799908] Bluetooth: hci3: command tx timeout
[  196.862374] Bluetooth: hci7: command tx timeout
[  196.926940] Bluetooth: hci5: command tx timeout
[  197.120484] Bluetooth: hci4: command tx timeout
[  198.718289] Bluetooth: hci0: command tx timeout
[  198.721232] Bluetooth: hci1: command tx timeout
[  198.846605] Bluetooth: hci6: command tx timeout
[  198.848460] Bluetooth: hci3: command tx timeout
[  198.848789] Bluetooth: hci2: command tx timeout
[  198.910278] Bluetooth: hci7: command tx timeout
[  198.975198] Bluetooth: hci5: command tx timeout
[  199.167298] Bluetooth: hci4: command tx timeout
[  200.766288] Bluetooth: hci1: command tx timeout
[  200.766827] Bluetooth: hci0: command tx timeout
[  200.896211] Bluetooth: hci6: command tx timeout
[  200.896501] Bluetooth: hci3: command tx timeout
[  200.896740] Bluetooth: hci2: command tx timeout
[  200.958795] Bluetooth: hci7: command tx timeout
[  201.022763] Bluetooth: hci5: command tx timeout
[  201.214307] Bluetooth: hci4: command tx timeout
[  255.310262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.317398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.318976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.320375] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.322887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.324402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.331124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.332697] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.338865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.346930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.349032] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.353275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.361462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.362888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.367661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.377090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.381602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.389636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.407918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.409808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.411611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.413121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  255.424604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  255.435389] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.436332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  255.514930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  255.523521] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  255.526622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  255.572755] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  255.579559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  255.754503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  255.810847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  255.814801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  255.816039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  255.822421] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  255.823529] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  255.850536] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  255.869721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  255.870587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.887610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.406372] Bluetooth: hci0: command tx timeout
[  257.407296] Bluetooth: hci1: command tx timeout
[  257.470577] Bluetooth: hci3: command tx timeout
[  257.470881] Bluetooth: hci4: command tx timeout
[  257.471729] Bluetooth: hci2: command tx timeout
[  257.664264] Bluetooth: hci5: command tx timeout
[  257.982393] Bluetooth: hci6: command tx timeout
[  258.046759] Bluetooth: hci7: command tx timeout
[  259.454664] Bluetooth: hci0: command tx timeout
[  259.456383] Bluetooth: hci1: command tx timeout
[  259.518338] Bluetooth: hci2: command tx timeout
[  259.519974] Bluetooth: hci3: command tx timeout
[  259.520022] Bluetooth: hci4: command tx timeout
[  259.711248] Bluetooth: hci5: command tx timeout
[  260.031314] Bluetooth: hci6: command tx timeout
[  260.094444] Bluetooth: hci7: command tx timeout
[  261.502404] Bluetooth: hci0: command tx timeout
[  261.502956] Bluetooth: hci1: command tx timeout
[  261.566317] Bluetooth: hci2: command tx timeout
[  261.566783] Bluetooth: hci4: command tx timeout
[  261.566809] Bluetooth: hci3: command tx timeout
[  261.758671] Bluetooth: hci5: command tx timeout
[  262.079266] Bluetooth: hci6: command tx timeout
[  262.142317] Bluetooth: hci7: command tx timeout
[  263.550270] Bluetooth: hci0: command tx timeout
[  263.550810] Bluetooth: hci1: command tx timeout
[  263.614277] Bluetooth: hci4: command tx timeout
[  263.614764] Bluetooth: hci3: command tx timeout
[  263.615360] Bluetooth: hci2: command tx timeout
[  263.807302] Bluetooth: hci5: command tx timeout
[  264.126748] Bluetooth: hci6: command tx timeout
[  264.192244] Bluetooth: hci7: command tx timeout
[  317.963786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  317.966590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  317.970599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  317.975784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  317.978557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.090777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  318.092639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  318.095677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  318.103760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  318.106014] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  318.241689] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  318.243828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  318.246489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  318.248839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.252655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  318.259340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.267845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.270105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  318.282966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  318.289720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  318.290008] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  318.291783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  318.295983] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  318.309047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  318.309608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.323463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.324119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.331087] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.332473] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  318.337361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.337585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  318.344576] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  318.346514] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  318.348505] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  318.350209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  318.363817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.385981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  318.386820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  318.414122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  318.423553] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  320.062388] Bluetooth: hci0: command tx timeout
[  320.126384] Bluetooth: hci1: command tx timeout
[  320.318281] Bluetooth: hci2: command tx timeout
[  320.446556] Bluetooth: hci5: command tx timeout
[  320.446712] Bluetooth: hci6: command tx timeout
[  320.574383] Bluetooth: hci4: command tx timeout
[  320.702294] Bluetooth: hci3: command tx timeout
[  320.702330] Bluetooth: hci7: command tx timeout
[  322.110799] Bluetooth: hci0: command tx timeout
[  322.175405] Bluetooth: hci1: command tx timeout
[  322.366728] Bluetooth: hci2: command tx timeout
[  322.495263] Bluetooth: hci5: command tx timeout
[  322.495812] Bluetooth: hci6: command tx timeout
[  322.622247] Bluetooth: hci4: command tx timeout
[  322.750877] Bluetooth: hci7: command tx timeout
[  322.750955] Bluetooth: hci3: command tx timeout
[  324.158676] Bluetooth: hci0: command tx timeout
[  324.222498] Bluetooth: hci1: command tx timeout
[  324.415285] Bluetooth: hci2: command tx timeout
[  324.542533] Bluetooth: hci5: command tx timeout
[  324.543135] Bluetooth: hci6: command tx timeout
[  324.672254] Bluetooth: hci4: command tx timeout
[  324.798667] Bluetooth: hci3: command tx timeout
[  324.800061] Bluetooth: hci7: command tx timeout
[  326.208389] Bluetooth: hci0: command tx timeout
[  326.270519] Bluetooth: hci1: command tx timeout
[  326.462261] Bluetooth: hci2: command tx timeout
[  326.590411] Bluetooth: hci5: command tx timeout
[  326.592222] Bluetooth: hci6: command tx timeout
[  326.719448] Bluetooth: hci4: command tx timeout
[  326.846502] Bluetooth: hci3: command tx timeout
[  326.848073] Bluetooth: hci7: command tx timeout
[  380.595319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.609772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.621944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.652630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.680715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.751353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  380.760428] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  380.762755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  380.767624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  380.775934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  380.839888] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.842537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  380.846513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.848697] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  380.850880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  380.854973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.861081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.863728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  380.866397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  380.869623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  380.942176] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  380.951769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  380.954833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.958553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.967363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.976962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  380.984500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  380.988133] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  380.995002] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  381.003719] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.008135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  381.009455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.013479] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  381.014609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.017008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  381.019125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  381.021805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  381.029875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  381.035531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  381.038800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  382.783329] Bluetooth: hci0: command tx timeout
[  382.846324] Bluetooth: hci1: command tx timeout
[  382.910257] Bluetooth: hci2: command tx timeout
[  382.974403] Bluetooth: hci3: command tx timeout
[  383.104229] Bluetooth: hci5: command tx timeout
[  383.106059] Bluetooth: hci4: command tx timeout
[  383.166578] Bluetooth: hci6: command tx timeout
[  383.167540] Bluetooth: hci7: command tx timeout
[  384.830302] Bluetooth: hci0: command tx timeout
[  384.894666] Bluetooth: hci1: command tx timeout
[  384.958290] Bluetooth: hci2: command tx timeout
[  385.022235] Bluetooth: hci3: command tx timeout
[  385.150357] Bluetooth: hci5: command tx timeout
[  385.151841] Bluetooth: hci4: command tx timeout
[  385.214470] Bluetooth: hci7: command tx timeout
[  385.215826] Bluetooth: hci6: command tx timeout
[  386.878754] Bluetooth: hci0: command tx timeout
[  386.942253] Bluetooth: hci1: command tx timeout
[  387.006764] Bluetooth: hci2: command tx timeout
[  387.070587] Bluetooth: hci3: command tx timeout
[  387.198600] Bluetooth: hci5: command tx timeout
[  387.199106] Bluetooth: hci4: command tx timeout
[  387.262289] Bluetooth: hci7: command tx timeout
[  387.262780] Bluetooth: hci6: command tx timeout
[  388.927224] Bluetooth: hci0: command tx timeout
[  388.992256] Bluetooth: hci1: command tx timeout
[  389.057006] Bluetooth: hci2: command tx timeout
[  389.118771] Bluetooth: hci3: command tx timeout
[  389.246654] Bluetooth: hci4: command tx timeout
[  389.248381] Bluetooth: hci5: command tx timeout
[  389.310647] Bluetooth: hci6: command tx timeout
[  389.311826] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
15:01:56  Registers:
info registers vcpu 0
RAX=ffff88801ccea030 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888036f4fc01
RSI=ffff888036f4fbf8 RDI=ffff888036f4f4c8 RBP=ffff888036f4f4d0 RSP=ffff888036f4f408
R8 =0000000000000001 R9 =ffff888036f4f4b8 R10=000000000003b124 R11=0000000000032239
R12=ffff888036f4f4d8 R13=ffff888036f4f4c0 R14=ffff888036f4fbf8 R15=ffff888036f4f478
RIP=ffffffff81351f5c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f01e77f7540 00000000 00000000
GS =0000 ffff8880e5648000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559cc4df74c8 CR3=00000000318d1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000002 RCX=dfb8078e475e76a4 RDX=ffffffff813508c9
RSI=000000008301a466 RDI=0000000008cd3ea4 RBP=ffff88806cf08af0 RSP=ffff88806cf089d8
R8 =0000000000000002 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=ffff88806cf08ae0 R14=ffff88806cf08ae0 R15=ffff88806cf08a98
RIP=ffffffff813508e3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5748000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055eeae524080 CR3=0000000031276000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000