Warning: Permanently added '[localhost]:24803' (ECDSA) to the list of known hosts.
2025/06/09 20:12:33 fuzzer started
2025/06/09 20:12:33 dialing manager at localhost:40003
syzkaller login: [  119.936946] cgroup: Unknown subsys name 'net'
[  120.087348] cgroup: Unknown subsys name 'cpuset'
[  120.139182] cgroup: Unknown subsys name 'rlimit'
2025/06/09 20:12:55 syscalls: 201
2025/06/09 20:12:55 code coverage: enabled
2025/06/09 20:12:55 comparison tracing: enabled
2025/06/09 20:12:55 extra coverage: enabled
2025/06/09 20:12:55 setuid sandbox: enabled
2025/06/09 20:12:55 namespace sandbox: enabled
2025/06/09 20:12:55 Android sandbox: enabled
2025/06/09 20:12:55 fault injection: enabled
2025/06/09 20:12:55 leak checking: enabled
2025/06/09 20:12:55 net packet injection: enabled
2025/06/09 20:12:55 net device setup: enabled
2025/06/09 20:12:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/09 20:12:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/09 20:12:55 USB emulation: enabled
2025/06/09 20:12:55 hci packet injection: enabled
2025/06/09 20:12:55 wifi device emulation: enabled
2025/06/09 20:12:55 802.15.4 emulation: enabled
2025/06/09 20:12:55 fetching corpus: 0, signal 0/0 (executing program)
2025/06/09 20:12:56 starting 8 fuzzer processes
20:12:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'wg1\x00', 0x8})
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='veth0_to_bond\x00')
r1 = socket$netlink(0x10, 0x3, 0xb)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f21448bad8"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "77793d35f166a8a40a116f2194"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4080}, 0x800)
getsockopt(r0, 0x5, 0x3, &(0x7f0000000240)=""/169, &(0x7f0000000300)=0xa9)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r0, {0x40}}, './file0\x00'})
ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000380))
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f00000003c0)={'veth0_macvtap\x00', 0xe9a})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "67b4833c3f17a28c611a466884"}]]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000001)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x31}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0xc0)
accept(r3, &(0x7f00000006c0)=@ethernet={0x0, @remote}, &(0x7f0000000740)=0x80)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8810)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000900)={'vxcan0\x00'})
r6 = socket(0x29, 0x6, 0x7)
accept4(r6, &(0x7f0000000940)=@isdn, &(0x7f00000009c0)=0x80, 0xc0000)

20:12:56 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x9, 0x40}, {0x8, 0x2}, 0x6, 0x1, 0xff})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000080)={0x7fffffff, 0x8, 0x8, 0xf6c6, 0x800, 0x7})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/hid_ntrig', 0x8040, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000180)={0x0, 0x0, 0x7, {0x1, 0x1}, 0x4, 0xffffff00})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x143800)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/cpuidle_haltpoll', 0x0, 0x23)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x4, 0x2}, {0x40, 0x8}, 0x80000001, 0x7, 0x1})
r2 = fsmount(r0, 0x1, 0xe)
ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000340))
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000003c0))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r4=>r0, {0x7}}, './file0\x00'})
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000004c0)=0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000500))
r5 = fsmount(r4, 0x0, 0xe8)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000580)={0xffff, 0x5, 0x0, 'queue1\x00', 0x4})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/image_size', 0x101, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000680)={0x80000000, 0x1, {0xffffffffffffffff, 0x3, 0x5, 0x2, 0xfffffff7}, 0x1})

20:12:56 executing program 2:
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
r0 = fsmount(0xffffffffffffffff, 0x1, 0x3)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080))
r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x301080)
ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x10000)
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000140)=0x1)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f00000001c0)={0xc14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xc00, 0x5, 0x0, 0x1, [{0x310, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7e}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa4ea}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5b65}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf001}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}]}, {0x708, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd1f2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff80}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2ac5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3da}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x264, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2efe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x344, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf472}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xec91}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x893f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd6921000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c0}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb501}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x562c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}]}]}]}, 0xc14}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000e80)={0x2}, 0x4)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000ec0)=0x5)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = fsmount(r0, 0x0, 0x70)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/module/i8042', 0x0, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'ip6_vti0\x00', r6, 0x4, 0xd8, 0x4, 0x5, 0x40, @empty, @remote, 0x0, 0x958970efbfefdfe9, 0x7, 0x3}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000001200)={{0x9, 0x3f}, 'port0\x00', 0x10, 0x81000, 0x1f, 0xffffffff, 0x1, 0x1, 0x7, 0x0, 0x3, 0x80})
sendto$unix(r0, &(0x7f00000012c0)="41e353737b8ff92ef3e18c0aabf95559994b6963532620282f4bf29610e6074411ba053d2d86c62d56893e10f34237bc625c7a912d44b8108c0d89761ad08ff44d487696e6785cf8f65d04eeaed1c9a6ce615bbd1bd241a48ce1e849ff9ee808236ae02ef5d9224d6ba7407ff0ee7e07b73629a905fa56b9d2816a20fd4e", 0x7e, 0x20000010, &(0x7f0000001340)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000001400))

[  142.249748] audit: type=1400 audit(1749499976.223:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
20:12:56 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000000)={'batadv_slave_1\x00', @ifru_addrs=@in={0x2, 0x0, @dev}})
socketpair(0x26, 0x3, 0x40, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0))
socket$inet(0x2, 0x4, 0x4)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000200)=0xfffffc00)
r2 = socket(0x1, 0x1, 0x10001)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/sysrq', 0x8080, 0x80)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xff}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40004014)
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000004c0)=""/201, &(0x7f00000005c0)=0xc9)
getsockname(r3, &(0x7f0000000600)=@sco={0x1f, @fixed}, &(0x7f0000000680)=0x80)
r4 = accept(r3, &(0x7f0000000700)=@tipc=@name, &(0x7f0000000780)=0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000007c0)={0x9, 0xdab0, 0x0, 0x1, 0x40, 0x7fffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000840))
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r5, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x880)

20:12:56 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x33}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20040c1)
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x708, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x70}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1bf87c4217fd683}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}]}, 0x58}}, 0x24000000)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="fa7407f073cd"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e3d9682bcc0f"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044081}, 0x801)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x715a0ed474071b7e}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x118, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa7, 0xac, "22217aa4b3c69c8ff838fa6b797f721a2dd83c122afd6310559598660540727b7242a8321ce971119d7f433e320c1cca963dcf932be2ddfa955cc568899872093b714f567fe1fe3ac75be8e700625b89c1bde771f3fdef1f7639d3f1c32f6608fd5c9c7dcff3c9f9ce4b7929282ef0d6e311196c81e75563ff92783c3ec512e5505403c8cb3a95fb39eb089b3f04379cb236c7e38665dd6fc16bde70ee9e97abd77697"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x34a}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x164}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x4804)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x70bd2d, 0xfff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40400c1)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000008c0)={0x0, 0xfffffffffffffffb, 0x8a, 0x2, @buffer={0x0, 0x12, &(0x7f0000000700)=""/18}, &(0x7f0000000740)="89d2d4b0d4b7251ab020880fbab37f9897aabd957f81a3db385a51426c835b04c2e2726fce9224bc8138b2ae616b7f7ce814eed8bfb623c2440a3e7d657cc6c3e9c326593f08ddee5a90321bb3c2233715e91f989451bb734f87835247e5b1c5823f474a867d323bdbf1b577e779dcddb919c3509aebfd621d648d3e89d3cff3cd7fd4de7e74911469d6", &(0x7f0000000800)=""/92, 0x2, 0x0, 0x0, &(0x7f0000000880)})
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000940)=0xd37e)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3b}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2000000)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000080}, 0x42fb9e0cee6be647)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r1, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a19eff930a88829d492079b1a715d738"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x240400c0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x2, 0x4}], "f60bb8776d8ca868"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x5, 0x4}], "7378b5593f6a059b"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x84)
r3 = accept4(r2, &(0x7f0000000dc0)=@generic, &(0x7f0000000e40)=0x80, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000e80)=0x5, 0x4)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000ec0)=0x1)
r4 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x10)

20:12:56 executing program 5:
r0 = getegid()
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$search(0xa, 0x0, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, r1)
getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x35, 0x36, 0x36, 0x61, 0x66, 0x64, 0x39, 0x53, 0x33, 0x34, 0x66, 0x30, 0x64, 0x39, 0x34, 0x34]}, &(0x7f0000000240)={0x0, "7b619e65295ab95f064424c8b69fc29eb6fca032ededb25b4b56b5a14fad0dea659fdd5078066b6c44b598c424ae773b06488ae80482c32de85f8e1132c3ab0f", 0x21}, 0x48, r1)
r3 = add_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="b9f7899d5020b4fcdfd383d77741fe96afcefeb72cfc318bccd2db7c6be442bbaaaddf4e0f9648a05f78acfc7a24838ef34a9e17f7d77eab2ebb25a40dadb0d04e9a0b75003385db0a538bd4e1664c0423983387433505077f16f68884537ff739c717b2c8612892ab647e57712c33801a77f62ff63f3ad3c5119ef6ef094575f7dc5f0616f2f9905fafd453bff03bdb1a79c747872c7d5d6e315e11b0c81eaac124c111cd167aeda427b1451442f9d989ae34482db3dfa05cf7", 0xba, r1)
keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000400), 0x1, 0x30301)
ioctl$MON_IOCQ_URB_LEN(r4, 0x9201)
getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
r5 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r2)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, 0xfffffffffffffff9, 0x0)
r6 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r7)
r8 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
r9 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "c5abd7f4dfebfe4e64214e458ae847fa02459b2ef3069ffda96cd8d2493526f878979dcc196ad9692d2aef45a6a6c17636efe65ec4b1a9fbf6cca983fbed6379", 0x2e}, 0x48, r1)
keyctl$KEYCTL_MOVE(0x1e, r8, r3, r9, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000880)={r6, 0x95, 0x5a}, &(0x7f00000008c0)={'enc=', 'raw', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000940)="98f4690635bb1e6f4c823fad57186466cd655882d00db257f6eba30c856c994e8f7459931bda33ec1926d7fbc3989f13f5d88d22fe33e67097d9b48361eb9adb7c743b412c7e2f84b8c8a1331dfd3288db91fb9e7dacf679a0c91d752bbbe4dd493b58d556b7845a1d2c32aefa2ebae89a6f35702c934d9029e1de236248b10de65375dfdbe30ea4d44114e7f0acf2201ce7929c15", &(0x7f0000000a00)=""/90)

20:12:56 executing program 6:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r1=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1e0, 0x0, 0xc01, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40004}, 0x20)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000440)={'veth0_to_bond\x00', @ifru_data=&(0x7f0000000400)="a53873e1c57cdaf60c3ccb2942ba0ddba21db8b54ec5e08e66b0916612e954bb"})
r2 = socket(0x21, 0x800, 0x3)
ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000480)="b7f23008c5c41954b422520efbb483d8c15c0421a2da2708836fcebc9b0673f7d19675ee26f06ee7a7ef3f108dce14a58c9bb8c4ead26f450f1f2575891cc5721e2cf2")
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={0x0, @qipcrtr={0x2a, 0x3, 0x7fff}, @isdn={0x22, 0x7, 0xef, 0x0, 0x1}, @can, 0x9, 0x0, 0x0, 0x0, 0x1c, &(0x7f0000000500)='veth1_virt_wifi\x00', 0x7fff, 0x7fff, 0xd})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/rcu_normal', 0x201, 0x20)
setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000600)=0x8, 0x4)
r4 = accept(r3, &(0x7f0000000640)=@nfc_llcp, &(0x7f00000006c0)=0x80)
accept4(r4, &(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000780)=0x80, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r5)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_netdev_private(r6, 0x89f4, &(0x7f0000000800)="70b9642389792b8456f90eed8984b5246a954c4c38ef2756f109d0d1003d854300d0a0c16ad11272617cd98841bc1bb132f6d0539247ff73819429b7e3217bdfccb859")
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000880))
r7 = fsmount(r3, 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000900))
sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e51343f1f23dcb22bb5e7f7712ff51cd"}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40000)

20:12:56 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ieee802154', 0x84040, 0x40)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x24004104)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x8, 0x8, 0x1, 'queue0\x00', 0x2})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffbff}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x4, 0x7ff, 0x1, 'queue0\x00', 0x3})
fsmount(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1e}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x18c1}, 0x814)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0xe10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408a5}, 0x4000010)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000580)=""/161, &(0x7f0000000640)=0xa1)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x4004804)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0xbe}, {0x8, 0x0, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000008c0)={0x7f, 0x36de, 0x3, 0xffffffc1}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r4, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x22}}}}, ["", ""]}, 0x28}}, 0x20000004)
r5 = accept4(r3, &(0x7f0000000a40)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000ac0)=0x80, 0x800)
setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000b00)={0x1000}, 0x4)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20008080)

[  143.702222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.704377] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.708757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.710653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.712957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.715271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.725723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.727130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  143.731393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  143.731678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.740547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.753948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.755252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.758886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.767101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.773324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.781380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.785572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.788126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  143.803980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  143.806665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  143.808892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  143.812805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  143.813267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  143.816817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  143.824668] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  143.827785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  143.855563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  143.856320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  143.861253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  143.891690] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  143.900303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  143.902796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  143.907900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  143.924956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  143.925182] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  143.928436] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  143.929737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  143.951797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  143.953487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  145.764877] Bluetooth: hci1: command tx timeout
[  145.828496] Bluetooth: hci0: command tx timeout
[  145.892969] Bluetooth: hci4: command tx timeout
[  145.893716] Bluetooth: hci5: command tx timeout
[  145.894212] Bluetooth: hci2: command tx timeout
[  145.894964] Bluetooth: hci3: command tx timeout
[  145.957486] Bluetooth: hci7: command tx timeout
[  146.020510] Bluetooth: hci6: command tx timeout
[  147.813174] Bluetooth: hci1: command tx timeout
[  147.878773] Bluetooth: hci0: command tx timeout
[  147.940575] Bluetooth: hci3: command tx timeout
[  147.941055] Bluetooth: hci4: command tx timeout
[  147.941845] Bluetooth: hci2: command tx timeout
[  147.942273] Bluetooth: hci5: command tx timeout
[  148.006469] Bluetooth: hci7: command tx timeout
[  148.068519] Bluetooth: hci6: command tx timeout
[  149.860594] Bluetooth: hci1: command tx timeout
[  149.925687] Bluetooth: hci0: command tx timeout
[  149.988767] Bluetooth: hci5: command tx timeout
[  149.989338] Bluetooth: hci2: command tx timeout
[  149.990654] Bluetooth: hci3: command tx timeout
[  149.991086] Bluetooth: hci4: command tx timeout
[  150.052490] Bluetooth: hci7: command tx timeout
[  150.116721] Bluetooth: hci6: command tx timeout
[  151.909541] Bluetooth: hci1: command tx timeout
[  151.973527] Bluetooth: hci0: command tx timeout
[  152.036577] Bluetooth: hci4: command tx timeout
[  152.037041] Bluetooth: hci2: command tx timeout
[  152.037641] Bluetooth: hci3: command tx timeout
[  152.038065] Bluetooth: hci5: command tx timeout
[  152.101533] Bluetooth: hci7: command tx timeout
[  152.165827] Bluetooth: hci6: command tx timeout
[  206.459179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.463139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.476162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.491880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.503215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.532542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  206.541039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  206.546523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  206.565083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  206.584335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.587621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.593249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  206.607663] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  206.617919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.621772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  206.627539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  206.636588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  206.643112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  206.647812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  206.674505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.680719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  206.686961] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.696702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  206.702921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  206.706792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  206.709474] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  206.720032] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  206.721992] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  206.728932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  206.731975] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  206.734238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  206.734385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  206.741969] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  206.754025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  206.812127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  206.819253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  206.847317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  206.862194] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  206.864745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  206.868845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  208.548821] Bluetooth: hci0: command tx timeout
[  208.612555] Bluetooth: hci1: command tx timeout
[  208.740589] Bluetooth: hci3: command tx timeout
[  208.805476] Bluetooth: hci5: command tx timeout
[  208.868845] Bluetooth: hci4: command tx timeout
[  208.870085] Bluetooth: hci2: command tx timeout
[  208.933349] Bluetooth: hci7: command tx timeout
[  208.934172] Bluetooth: hci6: command tx timeout
[  210.597875] Bluetooth: hci0: command tx timeout
[  210.660539] Bluetooth: hci1: command tx timeout
[  210.789865] Bluetooth: hci3: command tx timeout
[  210.854904] Bluetooth: hci5: command tx timeout
[  210.916854] Bluetooth: hci2: command tx timeout
[  210.917351] Bluetooth: hci4: command tx timeout
[  210.980536] Bluetooth: hci6: command tx timeout
[  210.981002] Bluetooth: hci7: command tx timeout
[  212.644538] Bluetooth: hci0: command tx timeout
[  212.709765] Bluetooth: hci1: command tx timeout
[  212.836513] Bluetooth: hci3: command tx timeout
[  212.901791] Bluetooth: hci5: command tx timeout
[  212.965788] Bluetooth: hci4: command tx timeout
[  212.966299] Bluetooth: hci2: command tx timeout
[  213.029511] Bluetooth: hci6: command tx timeout
[  213.030012] Bluetooth: hci7: command tx timeout
[  214.692755] Bluetooth: hci0: command tx timeout
[  214.756485] Bluetooth: hci1: command tx timeout
[  214.884532] Bluetooth: hci3: command tx timeout
[  214.950439] Bluetooth: hci5: command tx timeout
[  215.012979] Bluetooth: hci2: command tx timeout
[  215.013500] Bluetooth: hci4: command tx timeout
[  215.077258] Bluetooth: hci7: command tx timeout
[  215.077772] Bluetooth: hci6: command tx timeout
[  268.619136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  268.621859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  268.625000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  268.633547] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  268.642309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  268.730484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  268.734635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  268.739068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  268.745264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  268.750674] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  268.863873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  268.890792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  268.893989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  268.938956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  268.948255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.006667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  269.030148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  269.053537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  269.056229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  269.061127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  269.064271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  269.066696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  269.068342] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  269.073129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  269.076680] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  269.084252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  269.108533] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  269.146232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  269.152134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  269.153012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  269.163870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  269.178317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  269.182021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  269.196276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  269.203658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  269.234887] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  269.238164] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  269.242115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  269.244044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  269.254315] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  270.692712] Bluetooth: hci0: command tx timeout
[  270.821612] Bluetooth: hci1: command tx timeout
[  271.077498] Bluetooth: hci2: command tx timeout
[  271.140539] Bluetooth: hci7: command tx timeout
[  271.204777] Bluetooth: hci4: command tx timeout
[  271.332521] Bluetooth: hci3: command tx timeout
[  271.333256] Bluetooth: hci5: command tx timeout
[  271.396487] Bluetooth: hci6: command tx timeout
[  272.741738] Bluetooth: hci0: command tx timeout
[  272.869868] Bluetooth: hci1: command tx timeout
[  273.125696] Bluetooth: hci2: command tx timeout
[  273.190316] Bluetooth: hci7: command tx timeout
[  273.253516] Bluetooth: hci4: command tx timeout
[  273.381559] Bluetooth: hci5: command tx timeout
[  273.382019] Bluetooth: hci3: command tx timeout
[  273.444469] Bluetooth: hci6: command tx timeout
[  274.788715] Bluetooth: hci0: command tx timeout
[  274.917470] Bluetooth: hci1: command tx timeout
[  275.172473] Bluetooth: hci2: command tx timeout
[  275.239465] Bluetooth: hci7: command tx timeout
[  275.301920] Bluetooth: hci4: command tx timeout
[  275.430524] Bluetooth: hci3: command tx timeout
[  275.430987] Bluetooth: hci5: command tx timeout
[  275.494619] Bluetooth: hci6: command tx timeout
[  276.837553] Bluetooth: hci0: command tx timeout
[  276.965630] Bluetooth: hci1: command tx timeout
[  277.223467] Bluetooth: hci2: command tx timeout
[  277.285479] Bluetooth: hci7: command tx timeout
[  277.348624] Bluetooth: hci4: command tx timeout
[  277.476499] Bluetooth: hci5: command tx timeout
[  277.476982] Bluetooth: hci3: command tx timeout
[  277.541663] Bluetooth: hci6: command tx timeout
[  330.875295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  330.884660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  330.888138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  330.896100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  330.905272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.063442] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  331.068953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  331.073046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  331.083992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  331.091921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  331.154154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.162214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.165022] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.174972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.180031] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.263723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  331.272123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  331.275611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  331.291577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  331.311915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  331.383922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  331.390947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  331.406008] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  331.433847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  331.450874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  331.469672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.472172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  331.488194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  331.493291] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  331.496025] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  331.505631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  331.512132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  331.536170] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  331.580297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  331.589437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  331.619670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  331.637570] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  331.655890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  331.676089] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  331.714735] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  332.966451] Bluetooth: hci0: command tx timeout
[  333.156552] Bluetooth: hci1: command tx timeout
[  333.221686] Bluetooth: hci2: command tx timeout
[  333.412608] Bluetooth: hci3: command tx timeout
[  333.605507] Bluetooth: hci4: command tx timeout
[  333.668620] Bluetooth: hci6: command tx timeout
[  333.796532] Bluetooth: hci5: command tx timeout
[  333.797280] Bluetooth: hci7: command tx timeout
[  335.013814] Bluetooth: hci0: command tx timeout
[  335.205342] Bluetooth: hci1: command tx timeout
[  335.268710] Bluetooth: hci2: command tx timeout
[  335.460871] Bluetooth: hci3: command tx timeout
[  335.653457] Bluetooth: hci4: command tx timeout
[  335.717426] Bluetooth: hci6: command tx timeout
[  335.845436] Bluetooth: hci5: command tx timeout
[  335.845932] Bluetooth: hci7: command tx timeout
[  337.060570] Bluetooth: hci0: command tx timeout
[  337.252487] Bluetooth: hci1: command tx timeout
[  337.316484] Bluetooth: hci2: command tx timeout
[  337.509207] Bluetooth: hci3: command tx timeout
[  337.700681] Bluetooth: hci4: command tx timeout
[  337.764690] Bluetooth: hci6: command tx timeout
[  337.892569] Bluetooth: hci5: command tx timeout
[  337.893075] Bluetooth: hci7: command tx timeout
[  339.108829] Bluetooth: hci0: command tx timeout
[  339.300886] Bluetooth: hci1: command tx timeout
[  339.366437] Bluetooth: hci2: command tx timeout
[  339.556465] Bluetooth: hci3: command tx timeout
[  339.748696] Bluetooth: hci4: command tx timeout
[  339.812523] Bluetooth: hci6: command tx timeout
[  339.940511] Bluetooth: hci5: command tx timeout
[  339.940975] Bluetooth: hci7: command tx timeout
[  393.656285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  393.673920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  393.677281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  393.689842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  393.715728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  393.878810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.881256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  393.885462] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  393.890036] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.901228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  393.910928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  393.936970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.942794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  393.952974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  393.955953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.963284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  393.972051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  393.982764] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  394.002679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  394.007120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  394.015059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  394.016759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  394.026101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  394.048060] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  394.055795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  394.102942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  394.116875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  394.128160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  394.142296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  394.151538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  394.189045] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  394.203716] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  394.240368] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  394.248813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  394.280304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  394.420764] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  394.449002] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  394.479975] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  394.522031] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  394.541352] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  395.749087] Bluetooth: hci0: command tx timeout
[  396.068599] Bluetooth: hci2: command tx timeout
[  396.069766] Bluetooth: hci1: command tx timeout
[  396.197609] Bluetooth: hci4: command tx timeout
[  396.262307] Bluetooth: hci3: command tx timeout
[  396.264093] Bluetooth: hci5: command tx timeout
[  396.390520] Bluetooth: hci6: command tx timeout
[  396.645690] Bluetooth: hci7: command tx timeout
[  397.796554] Bluetooth: hci0: command tx timeout
[  398.117192] Bluetooth: hci2: command tx timeout
[  398.118149] Bluetooth: hci1: command tx timeout
[  398.244644] Bluetooth: hci4: command tx timeout
[  398.309052] Bluetooth: hci5: command tx timeout
[  398.310121] Bluetooth: hci3: command tx timeout
[  398.438768] Bluetooth: hci6: command tx timeout
[  398.695164] Bluetooth: hci7: command tx timeout
[  399.844659] Bluetooth: hci0: command tx timeout
[  400.164963] Bluetooth: hci1: command tx timeout
[  400.165933] Bluetooth: hci2: command tx timeout
[  400.293347] Bluetooth: hci4: command tx timeout
[  400.357085] Bluetooth: hci5: command tx timeout
[  400.359101] Bluetooth: hci3: command tx timeout
[  400.485541] Bluetooth: hci6: command tx timeout
[  400.743443] Bluetooth: hci7: command tx timeout
[  401.893553] Bluetooth: hci0: command tx timeout
[  402.214457] Bluetooth: hci2: command tx timeout
[  402.214973] Bluetooth: hci1: command tx timeout
[  402.341618] Bluetooth: hci4: command tx timeout
[  402.405778] Bluetooth: hci5: command tx timeout
[  402.406280] Bluetooth: hci3: command tx timeout
[  402.533496] Bluetooth: hci6: command tx timeout
[  402.789521] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
20:18:01  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81604870 RCX=ffff888025697890 RDX=0000000000000000
RSI=ffffffff81604bfe RDI=ffff8880256978c4 RBP=ffff888025697888 RSP=ffff8880256977f0
R8 =0000000000000001 R9 =ffff888025697830 R10=000000000003b6cd R11=00000000000043fe
R12=ffff8880256978b8 R13=0000000000000000 R14=ffff888015225280 R15=ffff88800dd64000
RIP=ffffffff812d9798 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6d9b71c260 CR3=0000000033dda000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff8880096f3700 RCX=ffffffff87a5eb08 RDX=0000000000000008
RSI=ffff8880096f4180 RDI=ffff8880096f3700 RBP=ffff8880096f4158 RSP=ffff888009747698
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff8880096f4180 R13=0000000000000001 R14=0000000000000000 R15=0000000000000003
RIP=ffffffff81518412 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2570b41008 CR3=0000000015524000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000