Warning: Permanently added '[localhost]:2850' (ECDSA) to the list of known hosts. 2024/10/18 14:08:49 fuzzer started 2024/10/18 14:08:50 dialing manager at localhost:45639 syzkaller login: [ 63.656968] cgroup: Unknown subsys name 'net' [ 63.764729] cgroup: Unknown subsys name 'cpuset' [ 63.828050] cgroup: Unknown subsys name 'rlimit' 2024/10/18 14:09:07 syscalls: 202 2024/10/18 14:09:07 code coverage: enabled 2024/10/18 14:09:07 comparison tracing: enabled 2024/10/18 14:09:07 extra coverage: enabled 2024/10/18 14:09:07 setuid sandbox: enabled 2024/10/18 14:09:07 namespace sandbox: enabled 2024/10/18 14:09:07 Android sandbox: enabled 2024/10/18 14:09:07 fault injection: enabled 2024/10/18 14:09:07 leak checking: enabled 2024/10/18 14:09:07 net packet injection: enabled 2024/10/18 14:09:07 net device setup: enabled 2024/10/18 14:09:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/18 14:09:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/18 14:09:07 USB emulation: enabled 2024/10/18 14:09:07 hci packet injection: enabled 2024/10/18 14:09:07 wifi device emulation: enabled 2024/10/18 14:09:07 802.15.4 emulation: enabled 2024/10/18 14:09:07 fetching corpus: 0, signal 0/0 (executing program) 2024/10/18 14:09:09 starting 8 fuzzer processes 14:09:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xf0000000, 0x6d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004884}, 0x20000004) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x601, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4090) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r2, &(0x7f0000004980)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000002940)=[{&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/230, 0xe6}, {&(0x7f0000002780)=""/114, 0x72}, {&(0x7f0000002800)=""/133, 0x85}, {&(0x7f00000028c0)=""/102, 0x66}], 0x8}}, {{&(0x7f00000029c0)=@abs, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/226, 0xe2}, {&(0x7f0000003b40)=""/42, 0x2a}, {&(0x7f0000003b80)=""/246, 0xf6}, {&(0x7f0000003c80)=""/13, 0xd}, {&(0x7f0000003cc0)=""/70, 0x46}], 0x6, &(0x7f0000003dc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003e80)=""/96, 0x60}, {&(0x7f0000003f00)=""/117, 0x75}, {&(0x7f0000003f80)=""/193, 0xc1}, {&(0x7f0000004080)=""/234, 0xea}, {&(0x7f0000004180)=""/5, 0x5}, {&(0x7f00000041c0)=""/69, 0x45}, {&(0x7f0000004240)=""/100, 0x64}, {&(0x7f00000042c0)=""/56, 0x38}], 0x8, &(0x7f0000004380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000004400), 0x6e, &(0x7f0000004840)=[{&(0x7f0000004480)=""/177, 0xb1}, {&(0x7f0000004540)=""/56, 0x38}, {&(0x7f0000004580)=""/247, 0xf7}, {&(0x7f0000004680)=""/101, 0x65}, {&(0x7f0000004700)=""/26, 0x1a}, {&(0x7f0000004740)=""/190, 0xbe}, {&(0x7f0000004800)=""/24, 0x18}], 0x7, &(0x7f00000048c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x4, 0x0, &(0x7f0000004a80)={0x77359400}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b00)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1060}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x364}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xeb7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c40), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000004f00)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004c80)={0x20c, r8, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_TID_CONFIG={0x1e4, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x0, 0x8000, 0x1, 0x4000, 0x7fff, 0x7f, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x800, 0x2, 0x5, 0x5, 0x6, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x6, 0xa}, {0x3, 0x3}, {0x7, 0x9}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x6, 0x8}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x7}, {0x4, 0x6}, {0x3}, {0x7}, {0x2, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x6, 0x7}, {0x2, 0x1}, {0x6, 0x6}, {0x2, 0x6}, {0x7}, {0x4, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x8}, {0x4, 0x6}, {0x4, 0x9}, {}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x3}, {0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xd6, 0x5, 0x4, 0x6, 0x2, 0x5, 0x1f]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x2}, {0x5, 0xa}, {0x7, 0x6}, {}, {0x2, 0x5}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0xa}, {0x1, 0xf}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x5}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x4, 0x7}, {0x2, 0xa}, {0x3, 0x7}, {0x2}, {0x5, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x5}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x3}, {0x2, 0x9}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x4, 0xc, 0x1b, 0x1b, 0x36, 0xb, 0x12, 0x24, 0x60, 0x12, 0x2, 0x2, 0x6c, 0x4, 0x68, 0x4, 0x1, 0x1, 0x6, 0x24, 0x5, 0x60, 0x16, 0xb, 0x5, 0x6, 0xc, 0x6c, 0xb, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x61, 0x24, 0x9]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x9}, {0x5, 0x6}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x7}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x3}, {0x3, 0x9}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x4}, {0x2, 0x3}, {0x7, 0x4}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x9}, {0x7}, {0x5, 0x9}, {0x1}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000004f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r9, &(0x7f0000005040)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x2c, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000005140)={&(0x7f0000005080), 0xc, &(0x7f0000005100)={&(0x7f00000050c0)={0x1c, r8, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r11, &(0x7f0000005240)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005200)={&(0x7f00000051c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000005340)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005300)={&(0x7f00000052c0)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005440)={&(0x7f0000005400)={0x34, 0x0, 0x10, 0xf789, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x10000, 0x77}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 14:09:09 executing program 0: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xe}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x882022a}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4172}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x47706a94}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x83000100}, 0xc, &(0x7f0000000a80)={&(0x7f00000002c0)={0x794, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x780, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3c}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x21}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x150, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x2}, {0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x36, 0x24, 0x0, 0x24, 0x3, 0x1, 0x16, 0x36, 0x16, 0x3, 0x9, 0xa3f439b7a5bce6fb, 0x36, 0x36, 0xb, 0xb, 0x2, 0x16, 0x16, 0x16, 0x24, 0x48, 0x36, 0x36, 0x30, 0x6c, 0x6, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x9, 0x12, 0x48, 0x36, 0xb, 0x30, 0x0, 0x16, 0x4, 0x9, 0x6c, 0x4, 0x6, 0x2]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x3}, {0x3, 0x3}, {0x4, 0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x6eb, 0x9, 0x7ff, 0x200, 0x200]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x9, 0x5, 0x6, 0x60, 0x12, 0x12, 0x6, 0x5, 0x4e, 0xc, 0x4, 0x48, 0x9, 0x30, 0x18, 0x12]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x0, 0x18}, {0x5, 0x4}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x3, 0x2, 0x466, 0x4, 0x5, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x7}, {0x3, 0x7}, {0x0, 0x5}, {0x7}, {0x6, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x2}, {0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x8}, {0x5, 0x4}, {}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x2}, {0x5, 0x4}, {0x7, 0x1}, {0x4, 0x4}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x3}, {0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x5, 0x6}, {0x4, 0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x734, 0x5, 0x3f, 0x8001, 0x6, 0x5, 0x1]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x8}, {0x0, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x3, 0x6}, {0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x1}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x91}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}]}, {0x440, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x418, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x60, 0x76, 0x68, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x4}, {0x1, 0xa}, {0x3, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x7, 0x8}, {0x6, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x9}, {0x6, 0x5}, {0x3}, {0x2, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0x8}, {0x6}, {0x5, 0x6}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x2}, {0x2, 0x8}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x1}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x1}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x3, 0x9]}]}, @NL80211_BAND_2GHZ={0x164, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x3}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x7}, {0x6, 0x7}, {0x3}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x6, 0x2}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x3}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x3}, {0x5, 0x9}, {0x3, 0x3}, {0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x1e}, {0x6, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x3}, {0x2, 0x1}, {0x3}, {0x3, 0x8}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x7}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x7}, {0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x7}, {0x2, 0x6}, {0x7, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x0, 0x5}, {0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x3}, {0x2, 0x7}, {0x6, 0xa}, {0x7, 0x4}, {0x4, 0x9}, {0x6}, {0x3, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0xb09023b86e833f9e, 0x36, 0x1, 0x48, 0xc, 0x60, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7d, 0x5, 0x6, 0x8, 0x7, 0xdb58, 0x401]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x1}, {0x7, 0x5}, {0x6, 0x19}, {0x4, 0x6}, {0x3, 0x6}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x2, 0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x5, 0x2}, {0x6, 0x8}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x3}, {0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x1, 0x3}, {0x2, 0x3}, {0x7, 0x3}, {0x0, 0x9}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x3}, {0x4, 0x9}, {0x5, 0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0xa}, {}, {0x2, 0x3}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0x4}, {0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x6}, {0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x2, 0x9}, {0x3, 0x5}, {0x6, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x9}, {0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x6}, {0x6}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0x6}, {0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0x8}, {0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x4}, {0x2}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x8}, {0x2, 0x3}, {0x3, 0x2}, {0x5, 0xa}, {0x2, 0x5}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x20, 0x3, 0xffff, 0x8000, 0x3ff, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x1, 0x1, 0x1ff, 0xfffe, 0x7f, 0x3, 0x3]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x76, 0x5, 0x5be, 0x0, 0x5bad, 0x90d9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x320, 0x3, 0x0, 0x2, 0x7f, 0x1, 0x7fff, 0x7c1]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x1}, {0x7, 0x8}, {0x6, 0x7}, {0x4, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x7, 0x4}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x8}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x8}, {0x1}, {0x0, 0x6}, {0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x4, 0x6}, {0x2, 0x3}, {}, {0x0, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x2, 0xa}, {0x2}, {0x6, 0xa}, {0x1, 0x9}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x1}, {}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x6}, {0x6, 0x5}, {0x5}, {0x5}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x4}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x3, 0x48, 0x3, 0x2, 0x36, 0x1b, 0xb, 0x18, 0x18, 0x69b7f6addb39b7da, 0x5, 0x18, 0x18, 0xc, 0x60, 0x36, 0x56, 0x0, 0x9, 0xb, 0x6, 0x1, 0x5, 0x24, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x424f, 0xffc0, 0x8000, 0xd6, 0x0, 0x40, 0x7f]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x2}, {0x1, 0x6}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x1}, {0x7, 0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x4, 0x3}, {0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x5, 0x4}, {0x1}, {0x2, 0x8}, {0x3, 0x1}, {0x2, 0x4}, {0x2, 0x2}, {0x3, 0x5}, {0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x2}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x7}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x6c, 0x24, 0x4, 0x48, 0xb, 0x1, 0x18, 0x59, 0x5, 0x4, 0x24, 0x5, 0xb, 0x36, 0x48, 0x36, 0xc, 0x30, 0x6c, 0x30, 0x1b, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x6c, 0x3, 0x4, 0xe, 0x3, 0xc, 0x24, 0x60, 0x30, 0x36, 0x24, 0xc, 0x6c, 0x12, 0x6c, 0x4, 0x6c, 0x18, 0x78, 0x2, 0x30, 0x4, 0x24, 0x9, 0x2, 0x1b, 0x2, 0x24]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x2, 0x9, 0x18]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x67cb, 0x4, 0x200, 0x5, 0x65, 0x400, 0x6]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x3}, {0x6, 0x7}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x1}, {0x3, 0x6}, {0x6, 0x5}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x5}, {0x1, 0x9}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x1}, {0x4, 0x7}, {0x2, 0x3}, {0x7, 0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x8}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x1}, {0x5, 0x5}, {0x1}, {0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x8}, {0x3, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0xa}, {0x2, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x1, 0x8, 0x6, 0x0, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x101, 0x5, 0x0, 0x1, 0x8, 0x7, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x401, 0xf9bb, 0x5, 0x80, 0x401, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0x8, 0x800, 0x2, 0x6, 0x718, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x1, 0x8dc2, 0x0, 0x1, 0x1ff, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x3b8e, 0x1000, 0xb1, 0x0, 0xfff, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x5}, {0x6, 0x3}, {0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x3, 0xa}, {0x2, 0x3}, {0x4, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x7, 0x1, 0x39d8, 0x2, 0x200, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x6, 0x16, 0x48, 0x6c, 0x36, 0x18, 0x36, 0xc, 0x1, 0x6, 0x6, 0x3, 0x6]}]}, @NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x2}, {0x5, 0x3}, {0x4}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x3, 0x1}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x5}, {0x7, 0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x7}, {0x4}, {0x7, 0xa}, {0x5, 0x1}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x7, 0x1}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x4}, {0x4, 0xa}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x12, 0x30, 0x0, 0x1b, 0x4, 0x48, 0x18, 0x2, 0x48, 0x2, 0x0, 0x0, 0x69, 0x3, 0x9, 0x0, 0x4, 0x0, 0x18]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x6}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x1}, {0x2, 0xa}, {0x3, 0x9}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x6, 0x8}, {0x4, 0x6}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x6}, {0x3, 0x8}, {0x3}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0x4}, {0x7, 0x4}, {0x5, 0x19}, {0x2, 0xa}, {0x2, 0x2}, {0x1, 0xa}, {0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x5}, {0x0, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x0, 0x0, 0x6, 0x30, 0xb, 0x3, 0x36]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0xb, 0xc, 0x1b, 0xb, 0x48, 0x5, 0xc, 0x30, 0x0, 0xc, 0x36, 0x12, 0x18, 0x12, 0xc, 0x6c, 0x48, 0x12, 0x2, 0x4, 0x24, 0x36, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x101, 0x9, 0x6, 0x7, 0x8000, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x4}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x4}, {0x4, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}]}]}]}, 0x794}, 0x1, 0x0, 0x0, 0x14}, 0x24000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, &(0x7f0000000b00)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000b80)=0x80) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000004) r2 = accept(r1, 0x0, &(0x7f0000000cc0)) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0xb}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x90, r3, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x35, 0xfc, "04c3b28ec38de2dda9372e42c9e2911ea9d45f90a845025ea67d7369156c38e1f4f50b7082694824e4c19be88942cace78"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "f090853fc87bd452ba466923a3e89c00"}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffc}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x3, 0x1, 0x0, {0x5, 0xc13, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x40, 0xf5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xcc}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x10) 14:09:09 executing program 2: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x391a01, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000100)={0x19}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000640)={0x0, 0xb}) read$ptp(r0, &(0x7f0000000680)=""/197, 0xc5) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x101040, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000007c0)={'\x00', 0xb7e, 0x1, 0x7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000840)={{0x7b, 0x1ff}, {0x80000001, 0x8}, 0x53a, 0x8}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000880)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x11}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}]}, 0x3c}}, 0x80) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000009c0)={0x2, 0xc}) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000a00)={0x80000, 0x3}) r3 = memfd_secret(0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f0000000a40)={0x8, 0x3}) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000a80)={'\x00', 0x0, 0x2, 0x7f00000}) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000b00)={'\x00', 0x3, 0x1, 0x8}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000006840)={&(0x7f0000006780)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000006800)={&(0x7f00000067c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x81, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000890) [ 81.802269] audit: type=1400 audit(1729260549.143:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:09:09 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x8e, 0x7, 0x51, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x700, 0x80, 0xffff0001, 0x7}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', r0, 0x2f, 0x5, 0x1, 0x0, 0x16, @empty, @mcast1, 0x10, 0x8, 0x3574, 0xfffffff8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r2, 0x2f, 0x7, 0x9, 0x1, 0x30, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x700, 0x8000, 0x0, 0xffff}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', r2, 0x8, 0x8000, 0x1, 0xbb, {{0x26, 0x4, 0x2, 0x8, 0x98, 0x68, 0x0, 0x80, 0x0, 0x0, @loopback, @multicast2, {[@noop, @timestamp_addr={0x44, 0x34, 0x1c, 0x1, 0xa, [{@private=0xa010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20000000}, {@remote, 0x75e}, {@empty}, {@multicast1, 0x2}, {@local, 0x8}]}, @timestamp_addr={0x44, 0x4c, 0x59, 0x1, 0x9, [{@multicast1, 0x1f}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff10d}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}, {@local, 0x61a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3fe0000}, {@empty, 0xaba}, {@rand_addr=0x64010102, 0x5}]}, @end]}}}}}) r4 = eventfd(0xa6) read$eventfd(r4, &(0x7f0000000380), 0x8) recvmmsg$unix(r1, &(0x7f0000003000)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/175, 0xaf}, {&(0x7f0000002540)=""/23, 0x17}, {&(0x7f0000002580)=""/90, 0x5a}, {&(0x7f0000002600)=""/125, 0x7d}], 0x7, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002840)=""/59, 0x3b}, {&(0x7f0000002880)=""/178, 0xb2}, {&(0x7f0000002940)=""/167, 0xa7}], 0x3, &(0x7f0000002a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002c00)=""/206, 0xce}, {&(0x7f0000002d00)=""/58, 0x3a}, {&(0x7f0000002d40)=""/18, 0x12}], 0x3, &(0x7f0000002dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000002f80)=""/42, 0x2a}], 0x2}}], 0x4, 0x2100, &(0x7f0000003100)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000031c0)={'ip6gre0\x00', &(0x7f0000003140)={'ip6gre0\x00', r0, 0x4, 0xe0, 0xde, 0x9, 0x41, @mcast1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x20, 0x7, 0x2, 0x3}}) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) getpgrp(r7) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r9, 0x11, 0xe369ce6b048030d7, &(0x7f0000003340), &(0x7f0000003380)=0x4) ptrace(0x11, r5) r10 = gettid() ptrace(0x11, 0xffffffffffffffff) syz_open_procfs$namespace(r10, &(0x7f00000033c0)='ns/user\x00') getpid() ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 14:09:09 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x81, 0x2a}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "2145347e4d1f6a4d04dbd247e8dc9dbf"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "441bb033618a0d78f1d7b75dc6c02848"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2ff7f9697e5cc02d05513b583c7aed23"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5352c6c95bc9deae6db043e460782a75"}, @NL80211_ATTR_PMK={0x14, 0xfe, "213fcce61214ec38d1dfe5cc7e70aaf7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d8914f7cb37fd71baf67a21c717f1e85"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e97bf746376bac65835a3b6919099986"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1001}, 0x20004000) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3f}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xb599, 0x57}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000005c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x61}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048885}, 0x40080c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcc9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000140) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x55}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "a190d649afba5bd2f05166f3cd681bbf"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="05f1d2dd5dba"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e500f0d29134b3e1a09ee63e3f3fca16"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x2000840) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f00000009c0)={'erspan0\x00', 0x0, 0x700, 0x20, 0x9, 0x800, {{0x1a, 0x4, 0x1, 0x3, 0x68, 0x68, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x7, 0x76, [@loopback]}, @generic={0x94, 0x3, 'W'}, @ssrr={0x89, 0xb, 0xd6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x45, [@rand_addr=0x64010100, @broadcast]}, @rr={0x7, 0x13, 0x4e, [@loopback, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xbe, [@broadcast, @loopback, @local, @rand_addr=0x64010102, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', r9, 0x7, 0x7, 0x0, 0x1000, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x65, 0x0, 0xb5, 0x4, 0x0, @local, @local, {[@rr={0x7, 0x1f, 0x25, [@remote, @remote, @rand_addr=0x64010101, @multicast1, @private=0xa010101, @loopback, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x55, 0x1, 0x9, [{@multicast2, 0x1000}, {@empty, 0x81}, {@broadcast, 0x3}, {@rand_addr=0x64010102, 0x1}]}, @noop]}}}}}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x25}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf68}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x44008) 14:09:09 executing program 5: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1aab4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x30}, 0x1, 0x0, 0x0, 0x5d2886521308232a}, 0x40005) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r0, 0x28, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x31}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x179}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x14, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xc}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_SSID={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4008050) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfd}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5a1}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000440)) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80, 0x4f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008190}, 0x800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000e00)={&(0x7f0000000680), 0xc, &(0x7f0000000dc0)={&(0x7f00000006c0)={0x6f8, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5b}]}]}, @NL80211_ATTR_TID_CONFIG={0x690, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x2, 0xc, 0xcbcaa05e7206b60a, 0x1, 0x16, 0x9, 0x36, 0x24, 0x18, 0x16, 0x30, 0x24, 0x3, 0x48, 0x48, 0x5f, 0x16, 0x3, 0x9, 0x30]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x16, 0x1b, 0x3, 0x4, 0x12, 0xb, 0x48, 0x60, 0x4, 0x18, 0xb, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1000, 0x5, 0x1f, 0x4, 0x9, 0x5, 0x4]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x12, 0x9, 0x4, 0xc, 0xc, 0x24, 0x3, 0x16, 0x12, 0x36, 0x6c, 0x18, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb08b, 0x1, 0x1, 0x20, 0x8, 0x36, 0x2, 0xfbe]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x0, 0x3, 0xfc00, 0x5, 0x0, 0xf28f, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x8, 0x2, 0x9, 0xd6, 0xba0b, 0x3, 0x1]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0xb, 0x1, 0x6c, 0x4, 0x3, 0x9, 0x6, 0xb, 0x30, 0x18, 0x4, 0x18, 0x18, 0x24, 0x1b, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x5, 0xffff, 0x0, 0x1, 0x9, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0x9}, {0x2, 0x1}, {0x4, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x3, 0x7}, {0x5, 0x7}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x81, 0x1, 0x2, 0x3f, 0x0, 0xff5]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x4}, {0x1, 0x1}, {}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x8}, {}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x5}, {0x4, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x2}, {0x1, 0xa}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x9}, {0x6, 0x8}]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x555, 0x1, 0x6, 0x58, 0x1ff, 0x3ff, 0x71]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x80, 0x2, 0x4, 0xfffe, 0x100, 0x101]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6, 0x24, 0x30, 0x30, 0x1, 0x6, 0x48, 0x16, 0x6, 0x4, 0x6, 0x1, 0x60, 0x5, 0x18, 0x22, 0xc, 0xb, 0x1b, 0x12, 0x24, 0x5, 0x9, 0x6, 0x9e924b784d63339f, 0x60, 0x16, 0x1e, 0xf34a6bb81b811cbe, 0x5, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {}, {0x3, 0x3}, {0x6, 0xa}, {0x6, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x6, 0x9}, {}, {0x0, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xf0ce75bdcc3cf886]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x1, 0x81, 0x1, 0x93cb, 0xf000, 0xff]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x6, 0x9}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x3}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x4}, {0x4}, {0x4, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x3}, {0x7, 0x4}, {0x2, 0x3}, {0x6, 0x2}, {0x5, 0x5}, {0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x3}, {0x2, 0x8}, {}, {0x4, 0x7}, {0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x2}, {0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {}, {0x7}, {0x1}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0xc, 0x4, 0x30, 0x0, 0x6c, 0x6c, 0x18]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4730, 0x40, 0x1, 0x6, 0x7, 0x6, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1ff, 0x9, 0x9, 0x0, 0x1ff, 0x2cf, 0x4]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x30, 0x36, 0x18, 0x16, 0x24, 0x3, 0x5, 0x1b, 0x30, 0x18, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x48, 0xc, 0x34, 0x24, 0x16, 0x6c, 0xb, 0x2, 0x0, 0x0, 0x6, 0x60, 0x4, 0xb, 0x5, 0x60]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x9, 0x1, 0x4, 0x4, 0x9]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x36, 0x4, 0x6c, 0x60, 0x9, 0x5, 0x0, 0x36, 0x1b, 0x1]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0xa}, {0x4, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x9}, {0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x5}, {0x6, 0x3}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0xb, 0x48, 0x6, 0x24, 0x30, 0xb, 0x6c, 0x4, 0x1, 0x4, 0x5, 0x1, 0x18, 0x16, 0x3, 0xc, 0x4, 0x6, 0x36, 0x18, 0x0, 0x4, 0x12, 0x16, 0xc, 0x48, 0xb, 0xf]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x270, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x4, 0xf320, 0x2, 0x2f7f, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x3, 0xffff, 0x8, 0x5, 0x3, 0x7, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x4}, {0x0, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x6}, {0x3}, {0x4, 0x17}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x7, 0x5}, {0x4, 0x5}, {0x4, 0x9}, {0x6, 0x9}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x4}, {0x5, 0x9}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x3}, {0x7}, {0x3, 0x3}, {0x5, 0x8}, {0x4, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x81, 0xa91, 0xa1c2, 0x1, 0xfff, 0x67]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0xa, 0x3, 0x1b, 0x1b, 0x1b, 0x2, 0x2, 0x12]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffb, 0x1ff, 0xfffb, 0x2, 0x7f, 0x3]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x7}, {0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x5}, {0x5}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x5}, {}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x8}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x9}, {0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x1}, {0x6, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x3, 0x5}, {0x4, 0xa}, {0x4, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x2, 0xa}, {0x6, 0x6}, {0x7, 0x2}, {0x7, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x16, 0xff, 0x42, 0xed, 0x9, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x4, 0x2}, {}, {0x6, 0x8}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x5}, {0x2, 0x1}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x2}, {0x7, 0x1}, {0x5, 0x5}, {0x2, 0x5}, {0x5, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0xa}, {0x1, 0xa}, {0x7, 0x5}, {0x1}, {0x6, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0xa}, {0x4, 0x12}, {0x6, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x6, 0xa}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0xe, 0x3, 0x6, 0x1, 0x3, 0x6, 0x9, 0x21710ba944fcea4c, 0x6, 0x6, 0x24, 0x4, 0x9, 0x6, 0xc, 0x5, 0x9, 0x2d]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x9}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x6}, {0x5, 0x7}, {0x3, 0x6}, {0x6, 0x2}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x36, 0x5, 0x60, 0x18, 0x16, 0x1, 0x6, 0xc, 0x30, 0x60, 0x48, 0x1b, 0x7, 0x4, 0x12]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x7, 0x4}, {0x2}, {0x0, 0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0x9}, {0x5, 0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x67e6859baf1fe704, 0xc, 0xb, 0x36, 0x16, 0x1, 0x6, 0x5, 0x5, 0x4, 0x36, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x60, 0x9, 0x5, 0x30, 0x48, 0x1, 0x24, 0x48, 0x3, 0x6c, 0x4, 0x16, 0x24, 0x2, 0x16, 0x26, 0x5, 0x2, 0x5ce69056fd95fbde, 0x1, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x84}, 0x84) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000e40)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000000f80)=""/246, 0xf6}, {&(0x7f0000001080)=""/191, 0xbf}, {&(0x7f0000001140)=""/136, 0x88}, {&(0x7f0000001200)=""/236, 0xec}, {&(0x7f0000001300)=""/255, 0xff}, {&(0x7f0000001400)=""/209, 0xd1}], 0x7, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x10002, &(0x7f0000001680)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r2) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x32901200}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x28, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x10}, @void, @val={0xc, 0x99, {0x3, 0x75}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048040}, 0x44004) r7 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001800)) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20008800) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r8 = accept(r5, &(0x7f0000001940)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f00000019c0)=0x80) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x40, r0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b80)={0x1a0, r9, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ac67c98f4403d7650f464f809dac20ff5f2ef32ba2993b5c"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'xfrm0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "66862b0b5c2b4f2736bae12e764a47d04e6eb05bd605e32a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ddd918de47f4d10da7f069054723d6b7c071ad33d41194c2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e976b944fababff8cedeba9c7c476ea1fd0daa19f77a4025"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43fe2dd4e509441c825c68e952191118fb6b9245402dfea0"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 14:09:09 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x7c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x192}]]}, 0x30}}, 0x20048080) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080040}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48044}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2cd88de9659547c58daa3c7eb"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xe, 0x4, "6793376c7955459874e2"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x24050040) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2e}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3b}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x10, 0x0, 0xae, 0x1, {{0x1f, 0x4, 0x1, 0x9, 0x7c, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @empty, {[@timestamp={0x44, 0x1c, 0xe8, 0x0, 0xf, [0x400, 0x3, 0x0, 0xfff, 0x9, 0x4]}, @generic={0x89, 0x12, "c571b3266e062c036010e12ed2d06375"}, @rr={0x7, 0x13, 0xe5, [@dev={0xac, 0x14, 0x14, 0x34}, @local, @rand_addr=0x64010100, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0xb, [{@broadcast, 0x4}, {@empty, 0x3}]}, @end, @generic={0x44, 0x12, "aad7df39d0ef223e37ed2d203fd5863a"}]}}}}}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000880)) r5 = accept(r3, &(0x7f00000008c0)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000940)=0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xa577, 0x6a}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="6a0989b7438b"}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4090) socketpair(0x6, 0x6, 0xe0, &(0x7f0000000a80)={0xffffffffffffffff}) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000b00)) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x8094}, 0x44) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x7}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x240, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000dc0)=0x1) 14:09:09 executing program 7: socketpair(0x26, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "610232ccabba1fa797a0cf52a59cb4bf"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6e7fd9478fde4fb880c2df501c6d094a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xf6}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5253}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1000}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}]}, 0x90}}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}}, 0x4) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001980)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/11, 0xb}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000015c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/70, 0x46}, {&(0x7f00000016c0)=""/200, 0xc8}], 0x2, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}], 0x2, 0x80008000, &(0x7f0000001a40)={r5, r6+10000000}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x94, r10, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000880}, 0x4008805) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r8) sendmsg$NL80211_CMD_DISASSOCIATE(r11, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800610}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x20, r12, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x40080) r13 = memfd_secret(0x80000) sendmsg$NL80211_CMD_GET_MPP(r13, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x5c, r12, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x48}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4010040) socketpair(0x2a, 0x5, 0x3df7, &(0x7f0000001ec0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DISASSOCIATE(r14, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x200040d5) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x50, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000041) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r12, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x2000c000) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x50, r2, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5c}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "03cdc620254e7a78a76b5ee57f"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "d51d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) [ 83.169301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.196591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.199559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.202399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.204402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.205533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.260368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.264374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.265708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.266976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.268486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.269833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.277890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.279458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.289700] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.290792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.292457] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.295420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.325545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.330635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.336621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.340835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.341762] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.342631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.348552] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.350897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.357989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.364097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.371585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.378495] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.382875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.393317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.394436] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.395742] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.400546] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.403436] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.405923] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.407871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.415414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.416627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.420732] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.424565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.531968] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.547724] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.556988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.569639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.572998] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.574479] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.227717] Bluetooth: hci0: command tx timeout [ 85.355344] Bluetooth: hci1: command tx timeout [ 85.419507] Bluetooth: hci2: command tx timeout [ 85.483414] Bluetooth: hci5: command tx timeout [ 85.548243] Bluetooth: hci3: command tx timeout [ 85.548838] Bluetooth: hci6: command tx timeout [ 85.611416] Bluetooth: hci7: command tx timeout [ 85.676292] Bluetooth: hci4: command tx timeout [ 87.278205] Bluetooth: hci0: command tx timeout [ 87.403311] Bluetooth: hci1: command tx timeout [ 87.467378] Bluetooth: hci2: command tx timeout [ 87.531632] Bluetooth: hci5: command tx timeout [ 87.595317] Bluetooth: hci6: command tx timeout [ 87.595811] Bluetooth: hci3: command tx timeout [ 87.661259] Bluetooth: hci7: command tx timeout [ 87.724320] Bluetooth: hci4: command tx timeout [ 89.323316] Bluetooth: hci0: command tx timeout [ 89.452406] Bluetooth: hci1: command tx timeout [ 89.517249] Bluetooth: hci2: command tx timeout [ 89.580256] Bluetooth: hci5: command tx timeout [ 89.643276] Bluetooth: hci3: command tx timeout [ 89.643757] Bluetooth: hci6: command tx timeout [ 89.707284] Bluetooth: hci7: command tx timeout [ 89.771259] Bluetooth: hci4: command tx timeout [ 91.372346] Bluetooth: hci0: command tx timeout [ 91.501201] Bluetooth: hci1: command tx timeout [ 91.563242] Bluetooth: hci2: command tx timeout [ 91.628243] Bluetooth: hci5: command tx timeout [ 91.692298] Bluetooth: hci6: command tx timeout [ 91.693687] Bluetooth: hci3: command tx timeout [ 91.755301] Bluetooth: hci7: command tx timeout [ 91.819252] Bluetooth: hci4: command tx timeout [ 146.173416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.175443] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.176723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.181366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.181592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.184585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.185723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.191337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.194835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.205844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.207738] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.208861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.245753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.246966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.249543] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.252361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.256480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.259632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.262650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.264000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.275188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.276537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.283032] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.285006] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.286236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.292787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.295386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.297048] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.298400] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.299626] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.300674] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.302461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.303447] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.304705] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.306903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.307907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.310260] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.310654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.312675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.315703] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.317492] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.318757] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.320555] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.331487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.333953] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.343588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.359011] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.366488] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.204955] Bluetooth: hci1: command tx timeout [ 148.268383] Bluetooth: hci0: command tx timeout [ 148.395277] Bluetooth: hci4: command tx timeout [ 148.398245] Bluetooth: hci3: command tx timeout [ 148.398870] Bluetooth: hci2: command tx timeout [ 148.399531] Bluetooth: hci5: command tx timeout [ 148.459335] Bluetooth: hci6: command tx timeout [ 148.460292] Bluetooth: hci7: command tx timeout [ 150.251580] Bluetooth: hci1: command tx timeout [ 150.315353] Bluetooth: hci0: command tx timeout [ 150.444395] Bluetooth: hci5: command tx timeout [ 150.444935] Bluetooth: hci2: command tx timeout [ 150.446330] Bluetooth: hci3: command tx timeout [ 150.446477] Bluetooth: hci4: command tx timeout [ 150.507457] Bluetooth: hci7: command tx timeout [ 150.507953] Bluetooth: hci6: command tx timeout [ 152.301194] Bluetooth: hci1: command tx timeout [ 152.363258] Bluetooth: hci0: command tx timeout [ 152.491299] Bluetooth: hci2: command tx timeout [ 152.491868] Bluetooth: hci4: command tx timeout [ 152.491910] Bluetooth: hci3: command tx timeout [ 152.492539] Bluetooth: hci5: command tx timeout [ 152.556420] Bluetooth: hci6: command tx timeout [ 152.556934] Bluetooth: hci7: command tx timeout [ 154.350241] Bluetooth: hci1: command tx timeout [ 154.411330] Bluetooth: hci0: command tx timeout [ 154.539252] Bluetooth: hci3: command tx timeout [ 154.539798] Bluetooth: hci4: command tx timeout [ 154.540816] Bluetooth: hci2: command tx timeout [ 154.541339] Bluetooth: hci5: command tx timeout [ 154.603263] Bluetooth: hci7: command tx timeout [ 154.603300] Bluetooth: hci6: command tx timeout [ 208.560986] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.561073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.562852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.566391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.567720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.567758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.574406] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.574917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.576704] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.578279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.578574] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.580771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.648813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.653410] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.655286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.663606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.692558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.696385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.700730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.702396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.706597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.707611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.710520] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.717607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.755503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.792671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.804488] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.830988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.837831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.841382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.846062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.857610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.857639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.866746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.876551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.886030] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.914281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.920378] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.921301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.928260] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.931923] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.936280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.944407] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.947802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.972013] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.983388] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.033478] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.041917] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.603269] Bluetooth: hci0: command tx timeout [ 210.669335] Bluetooth: hci1: command tx timeout [ 210.795255] Bluetooth: hci2: command tx timeout [ 210.796279] Bluetooth: hci3: command tx timeout [ 210.988534] Bluetooth: hci5: command tx timeout [ 211.051323] Bluetooth: hci6: command tx timeout [ 211.052389] Bluetooth: hci4: command tx timeout [ 211.115967] Bluetooth: hci7: command tx timeout [ 212.651293] Bluetooth: hci0: command tx timeout [ 212.716225] Bluetooth: hci1: command tx timeout [ 212.843523] Bluetooth: hci2: command tx timeout [ 212.844088] Bluetooth: hci3: command tx timeout [ 213.036299] Bluetooth: hci5: command tx timeout [ 213.099286] Bluetooth: hci6: command tx timeout [ 213.099829] Bluetooth: hci4: command tx timeout [ 213.164313] Bluetooth: hci7: command tx timeout [ 214.699224] Bluetooth: hci0: command tx timeout [ 214.764293] Bluetooth: hci1: command tx timeout [ 214.891357] Bluetooth: hci3: command tx timeout [ 214.891910] Bluetooth: hci2: command tx timeout [ 215.084513] Bluetooth: hci5: command tx timeout [ 215.149200] Bluetooth: hci4: command tx timeout [ 215.149747] Bluetooth: hci6: command tx timeout [ 215.211418] Bluetooth: hci7: command tx timeout [ 216.754267] Bluetooth: hci0: command tx timeout [ 216.811238] Bluetooth: hci1: command tx timeout [ 216.942309] Bluetooth: hci2: command tx timeout [ 216.942866] Bluetooth: hci3: command tx timeout [ 217.131236] Bluetooth: hci5: command tx timeout [ 217.196260] Bluetooth: hci6: command tx timeout [ 217.198118] Bluetooth: hci4: command tx timeout [ 217.259222] Bluetooth: hci7: command tx timeout [ 271.095769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.097635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.099456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.103480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.105309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.106548] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.173462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.175947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.181717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.183448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.188611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.192613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.207813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.210645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.213209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.218467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.222035] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.225558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.234821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.242413] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.245225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.247726] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.250373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.252441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.280399] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.293671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.295937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.304392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.311535] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.328727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.335726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.343338] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.347064] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.352433] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.375677] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.386211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.396820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.401276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.407293] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.407332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.423496] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.424420] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.449558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.466403] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.468396] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.477358] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.493392] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.503066] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.131246] Bluetooth: hci0: command tx timeout [ 273.323240] Bluetooth: hci1: command tx timeout [ 273.324855] Bluetooth: hci2: command tx timeout [ 273.324909] Bluetooth: hci3: command tx timeout [ 273.451796] Bluetooth: hci5: command tx timeout [ 273.515259] Bluetooth: hci4: command tx timeout [ 273.579331] Bluetooth: hci6: command tx timeout [ 273.643401] Bluetooth: hci7: command tx timeout [ 275.179294] Bluetooth: hci0: command tx timeout [ 275.371475] Bluetooth: hci3: command tx timeout [ 275.371557] Bluetooth: hci1: command tx timeout [ 275.372855] Bluetooth: hci2: command tx timeout [ 275.500641] Bluetooth: hci5: command tx timeout [ 275.563229] Bluetooth: hci4: command tx timeout [ 275.628182] Bluetooth: hci6: command tx timeout [ 275.692309] Bluetooth: hci7: command tx timeout [ 277.227371] Bluetooth: hci0: command tx timeout [ 277.419239] Bluetooth: hci1: command tx timeout [ 277.419745] Bluetooth: hci2: command tx timeout [ 277.420261] Bluetooth: hci3: command tx timeout [ 277.547227] Bluetooth: hci5: command tx timeout [ 277.611218] Bluetooth: hci4: command tx timeout [ 277.675254] Bluetooth: hci6: command tx timeout [ 277.739332] Bluetooth: hci7: command tx timeout [ 279.275219] Bluetooth: hci0: command tx timeout [ 279.467258] Bluetooth: hci3: command tx timeout [ 279.467755] Bluetooth: hci2: command tx timeout [ 279.468855] Bluetooth: hci1: command tx timeout [ 279.595214] Bluetooth: hci5: command tx timeout [ 279.659254] Bluetooth: hci4: command tx timeout [ 279.723501] Bluetooth: hci6: command tx timeout [ 279.787208] Bluetooth: hci7: command tx timeout [ 333.176840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.184232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.185393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.190838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.197568] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.198877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.297278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.299320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.300933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.304562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.306315] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.307523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.374540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.377632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.379741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.383430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.393896] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.395964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.503343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.509198] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.512630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.520532] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.524728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.527311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.531685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.543942] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.548520] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.551350] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.563865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.570278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.570352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.574005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.576173] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.580728] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.584957] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.587616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.673781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.685656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.714915] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.717541] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.726218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.745325] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.749591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.757449] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.759516] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.761630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.802479] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.807231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.275239] Bluetooth: hci0: command tx timeout [ 335.339374] Bluetooth: hci1: command tx timeout [ 335.403386] Bluetooth: hci2: command tx timeout [ 335.659221] Bluetooth: hci5: command tx timeout [ 335.659265] Bluetooth: hci4: command tx timeout [ 335.725079] Bluetooth: hci3: command tx timeout [ 335.851483] Bluetooth: hci7: command tx timeout [ 335.915333] Bluetooth: hci6: command tx timeout [ 337.323200] Bluetooth: hci0: command tx timeout [ 337.389301] Bluetooth: hci1: command tx timeout [ 337.451239] Bluetooth: hci2: command tx timeout [ 337.708231] Bluetooth: hci5: command tx timeout [ 337.708260] Bluetooth: hci4: command tx timeout [ 337.772206] Bluetooth: hci3: command tx timeout [ 337.899403] Bluetooth: hci7: command tx timeout [ 337.965146] Bluetooth: hci6: command tx timeout [ 339.371219] Bluetooth: hci0: command tx timeout [ 339.436180] Bluetooth: hci1: command tx timeout [ 339.499420] Bluetooth: hci2: command tx timeout [ 339.755264] Bluetooth: hci5: command tx timeout [ 339.755295] Bluetooth: hci4: command tx timeout [ 339.819225] Bluetooth: hci3: command tx timeout [ 339.949140] Bluetooth: hci7: command tx timeout [ 340.011421] Bluetooth: hci6: command tx timeout [ 341.419218] Bluetooth: hci0: command tx timeout [ 341.483425] Bluetooth: hci1: command tx timeout [ 341.547298] Bluetooth: hci2: command tx timeout [ 341.803237] Bluetooth: hci5: command tx timeout [ 341.804989] Bluetooth: hci4: command tx timeout [ 341.867695] Bluetooth: hci3: command tx timeout [ 341.997157] Bluetooth: hci7: command tx timeout [ 342.061166] Bluetooth: hci6: command tx timeout [ 390.510437] kworker/u10:0 (27) used greatest stack depth: 22720 bytes left VM DIAGNOSIS: 14:14:19 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888027b44140 RCX=ffffffff812fadc5 RDX=0000000000000001 RSI=0000000000000020 RDI=ffffffff87ed5ce5 RBP=ffff888027b43700 RSP=ffff88806ce09b70 R8 =dffffc0000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=0000000000000116 R12=ffff888027b44190 R13=0000000000000001 R14=0000000000000002 R15=ffff888027b44161 RIP=ffffffff812faf01 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f270becd000 CR3=000000000c52c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=000000000000000042494c4700352e32 XMM04=312e325f4342494c470035312e325f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8683854e RDX=1ffff1100681fe9e RSI=0000000000000000 RDI=0000000000000001 RBP=ffff8880340ff500 RSP=ffff8880340ff438 R8 =ffffffff86838552 R9 =ffff8880340ff4e8 R10=000000000003c001 R11=0000000000024ae1 R12=ffff8880340ff508 R13=ffff8880340ff4f0 R14=ffff8880340ff670 R15=ffff8880340ff4a8 RIP=ffffffff8114a520 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9ea1e94540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8fa904c260 CR3=000000002c812000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000