Warning: Permanently added '[localhost]:1126' (ECDSA) to the list of known hosts. 2025/06/22 03:23:17 fuzzer started 2025/06/22 03:23:18 dialing manager at localhost:33119 syzkaller login: [ 94.190618] cgroup: Unknown subsys name 'net' [ 94.340543] cgroup: Unknown subsys name 'cpuset' [ 94.396662] cgroup: Unknown subsys name 'rlimit' 2025/06/22 03:23:34 syscalls: 218 2025/06/22 03:23:34 code coverage: enabled 2025/06/22 03:23:34 comparison tracing: enabled 2025/06/22 03:23:34 extra coverage: enabled 2025/06/22 03:23:34 setuid sandbox: enabled 2025/06/22 03:23:34 namespace sandbox: enabled 2025/06/22 03:23:34 Android sandbox: enabled 2025/06/22 03:23:34 fault injection: enabled 2025/06/22 03:23:34 leak checking: enabled 2025/06/22 03:23:34 net packet injection: enabled 2025/06/22 03:23:34 net device setup: enabled 2025/06/22 03:23:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/22 03:23:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/22 03:23:34 USB emulation: enabled 2025/06/22 03:23:34 hci packet injection: enabled 2025/06/22 03:23:34 wifi device emulation: enabled 2025/06/22 03:23:34 802.15.4 emulation: enabled 2025/06/22 03:23:34 fetching corpus: 0, signal 0/0 (executing program) 2025/06/22 03:23:37 starting 8 fuzzer processes 03:23:37 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x101000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d8, r2, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x6b}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x152, 0x33, @reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0x7, 0x2}}, 0x180, 0x66, @default, @val={0x1, 0x4, [{0x4}, {0x36}, {0x46}, {0x7e}]}, @val={0x2d, 0x1a, {0x10, 0x3, 0x1, 0x0, {0xccc4, 0x5, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x800, 0x3572, 0x7f}}, [{0xdd, 0x8b, "280e0e579ac6cffb486b23c60e972e66bcf3b579a69e0acbca92fe34b8394d53edf86a097ab660f14bdbd210ab022716dfd5145f46cda8631f6194caec39cbb564ff6f0ed620b4f4ee74046ddb243131029747a1d24404d87ffbdc4dbf23f1df83a7294b66778449a97f5d01994caa97cc60cbe2a87fc9c64b7aab5ec9d5fb929c17066e32ddd973201260"}, {0xdd, 0x20, "ba1193885a84253118d8f923d64bdcb48d53bc1ca6fc13387eed73f4aa4ac569"}, {0xdd, 0x48, "bb277adbb7a7e7df6983d8c2f53a40a86fce01e7ac967e455d298f62806d9be8c66dc9bf8813c0d9fb6686cc4d6562e9c37ef5e3531e0d123d91052ed23c44ad0701f7ec332dbb8d"}, {0xdd, 0x13, "9df5db2a4421c1e83d3c65d03210a1ddb1b15a"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1364}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x2b3d, 0xffff, 0xfff7, 0x4, 0x5]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x586}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20000000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x119500, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc18f, 0x1a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x44810) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x942, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x110, r2, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bd0d9c1a85938c9ddfd49f8c5f4a2b94add638e7f644c1c062fda3b211bae6b4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bf55b8af9930bd3"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "779993848d6d8e6b"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="682dd420f451d89083e9503550358fb067e46b5e35c8e14b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="880edbf291986a733aa105ccd92c25b6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3ead8a537dfc38f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b1b4351887fb7d7f36e23e78aef96b334bef8bcb58db04af"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "58740c7f751488cf"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "178f54839f7389b9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="acec55a8e4b6da531d23327377371554"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fa27d040d07ab6d1bdb20255309d4e55"}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40c0}, 0x4010) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2400004}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r2, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9ef7681, 0x7e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x811) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r5) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r9, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r10 = socket(0x5, 0x80000, 0x7f) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r10, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r9, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}]}, 0x34}}, 0x4040) 03:23:37 executing program 1: sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000850) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x8, 0x1}], "a577e3bcb0db11ce"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{}, {0x80, 0x6}, {0xe, 0x6}, {0x2, 0x5}, {0xb6, 0x6}, {0x6, 0x2}, {0x40, 0x1}, {0x1}, {0x5, 0x6}, {0xff, 0x5}, {0x3f, 0x6}, {0x7f, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x6}], "44d4191c578612ab"}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0xcc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4c2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4800010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffb, 0x74}}}}, [@NL80211_ATTR_IE={0x16, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @dsss={0x3, 0x1, 0xd}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x3e, 0x0, 0xffffffffffffffff, 0xfe, 0x51}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2884) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8889) r7 = accept(r5, &(0x7f00000007c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000840)=0x80) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x4, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x44001) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x3f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000800) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b00), 0x10000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r9, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2400c101) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x7}}}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "409b703f5d73b87cf96ed01e9f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:23:37 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40804) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0xe}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x2000040) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r6 = accept(0xffffffffffffffff, &(0x7f0000000500)=@can={0x1d, 0x0}, &(0x7f0000000580)=0x80) accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14, 0x80000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xf8b21e02c1d3e654}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000640)={0x64c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x48, 0x6, 0x80}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r4}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200b47dd}}}]}}, {{0x8, 0x1, r8}, {0x118, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x6, 0x5, 0x1}, {0x200, 0x6, 0x7, 0x2}, {0x2, 0xf8, 0x7f, 0x6}, {0x1, 0x81, 0x8, 0xb8b}, {0x1000, 0xfc, 0x5, 0x4}, {0x8, 0x64, 0x20, 0x9}]}}}]}}]}, 0x64c}}, 0x4000) r9 = syz_open_dev$vcsn(&(0x7f0000000d40), 0x7, 0x82281) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x90, r1, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x12, 0x4, "6cc26ebc30ded635fa15527573fc"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0xabfdcb4ff726cba5) socketpair(0x11, 0x800, 0x80000001, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x1, 0x1, 0x4) getpeername$packet(r6, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001140)=0x14) getsockname$packet(r6, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000011c0)=0x14) accept$packet(r6, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000013c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f00000023c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002380)={&(0x7f0000001900)={0xa58, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r12}, {0x180, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ad}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8034}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}]}}, {{0x8, 0x1, r15}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x49d, 0x4, 0x20}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe294}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0xa58}, 0x1, 0x0, 0x0, 0x10}, 0x1) 03:23:37 executing program 3: rt_sigsuspend(&(0x7f0000000000)={[0x5]}, 0x8) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/4096, 0x1000) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000001040)={0xb}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000001500)={{0x8, 0x3}, {0x7ff, 0x9}, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000001540)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000016c0)={{}, {0x5, 0x7}, 0x41d2, 0x1}) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000001700)={'\x00', 0x1ab, 0x2, 0x2}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x20, 0x0, 0x721, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x4000000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001880), 0x80, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000018c0)) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000001940)={0x1, 0x8}) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000001980)={'\x00', 0x101, 0x0, 0xffffff88}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000001a00), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x58}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000080) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000001b80)={0xfffffffc, 0x8}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001bc0), 0x440, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000001c00)={0xf}) 03:23:37 executing program 4: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}]}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x46b56334}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000008}, 0x40014) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004084) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8850}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x10) r3 = accept(0xffffffffffffffff, &(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000007c0)=0x80) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x44093) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r3) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9d}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x40) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x25, 0x3, 0x7, 0x20, 0x3, 0x3, 0x8]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0xffff, 0x0, 0x0, 0x2, 0xa9, 0x1, 0x2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x34000044) r6 = accept(r4, &(0x7f0000000b80)=@l2={0x1f, 0x0, @none}, &(0x7f0000000c00)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e00)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0}, &(0x7f0000000e80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001400)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000f80)={0x43c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r8}, {0xd0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe19}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0xff, 0x6, 0x1000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x20, 0x1, 0x40, 0x7}, {0xa18, 0x8, 0xff, 0x8}, {0xb64, 0xc6, 0x40, 0x1}, {0x8, 0x40, 0x20, 0x8000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) [ 113.018025] audit: type=1400 audit(1750562617.325:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:23:37 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/netpoll', 0x408800, 0x8) sendto$packet(r0, &(0x7f0000000040)="b5f76fa4f858bcd4f17f106a717e73157b21e491dde41a3923a47e81c5b7473d419954dc31d10b5c947c7759eae7136aa5b79ebdb9", 0x35, 0x20040010, &(0x7f0000000080)={0x11, 0x18, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x31}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x94f0fe61fe9e8e58, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20008840) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r3 = syz_io_uring_setup(0x5faa, &(0x7f0000000440)={0x0, 0x5a, 0x2, 0x0, 0x2f0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r3, 0x10000000) io_uring_setup(0x1efe, &(0x7f0000000540)={0x0, 0x3688, 0x0, 0x3, 0xfc, 0x0, r1}) syz_io_uring_setup(0x4b37, &(0x7f00000005c0)={0x0, 0x366d, 0x2, 0x2, 0x244, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000640), &(0x7f0000000680)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/module/sysrq', 0x1, 0x0) io_uring_setup(0x14b8, &(0x7f0000000740)={0x0, 0x21c3, 0x8, 0x1, 0x1da, 0x0, r4}) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) ptrace$cont(0x20, 0x0, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000014}, 0x8004) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x1c}}, 0x20000911) 03:23:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x33a, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x78}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x40001) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x80}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004880) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa596}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x84000}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "441af78783ef7395c413b25b6e"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="86e8cc6eb405526e74bc7368c347a63bbbc12ccaeb62"}]}, 0x84}, 0x1, 0x0, 0x0, 0x8881}, 0x40040) r4 = accept(r0, &(0x7f0000000700)=@caif=@util, &(0x7f0000000780)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20048000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r5, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5f6}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r6 = syz_open_dev$vcsn(&(0x7f0000000b00), 0x4, 0xd0100) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40010) socketpair(0x3, 0xa, 0xfff, &(0x7f0000000c80)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f00000011c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d40)={0x408, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_IE={0x80, 0x2a, [@preq={0x82, 0x36, @ext={{0x0, 0x0, 0x1}, 0x7, 0x2, 0xf10, @device_a, 0xfffffff7, @device_a, 0x7, 0x2, 0x2, [{{0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}]}}, @perr={0x84, 0x22, {0x5a, 0x2, [@ext={{}, @device_a, 0x6, @broadcast, 0x3e}, @not_ext={{}, @device_a, 0x7fffffff, "", 0x3a}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x10, {0xf5b, "f94662e3d3ba", @short="bc55607dccde31ff"}}, @chsw_timing={0x68, 0x4, {0x7, 0x5}}]}, @NL80211_ATTR_IE={0x24b, 0x2a, [@perr={0x84, 0x10f, {0x8, 0x11, [@ext={{}, @broadcast, 0x4, @device_a, 0x14}, @not_ext={{}, @broadcast, 0x5, "", 0x31}, @not_ext={{}, @device_a, 0x5, "", 0x35}, @not_ext={{}, @device_b, 0x7, "", 0x19}, @ext={{}, @device_b, 0x5}, @ext={{}, @device_b, 0x7fffffff, @broadcast, 0xe}, @ext={{}, @broadcast, 0x6, @device_a, 0x3c}, @not_ext={{}, @device_b, 0x9, "", 0xb}, @not_ext={{}, @broadcast, 0x9, "", 0x40}, @not_ext={{}, @device_b, 0x2, "", 0x3c}, @ext={{}, @broadcast, 0x97ab, @device_a, 0x11}, @not_ext={{}, @device_b, 0x7, "", 0x12}, @not_ext={{}, @device_a, 0x40, "", 0x37}, @ext={{}, @device_a, 0x0, @device_b, 0x1c}, @ext={{}, @device_a, 0x7fffffff, @broadcast, 0x35}, @ext={{}, @device_a, 0x4, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x7f, "", 0x7}]}}, @tim={0x5, 0xcf, {0x5, 0x4b, 0x6, "c50de6cfedd3d8c6894d55daff2377bfecb8d99cf63d7991878dcf7e75983d817c47c9ce0681f29d593eef95a40a363030169e8e7371096781940eb0577502b7dd071790d3704fd6d18f816da76ca5284928f28d297980c189c6c974f14d91bbcb6d2384d6f3f8a35bc619853312b4c50332591b64caa9adeaed6ab950224ff770d93f51cb6d7e6d23bfbaf889b30c077818620991d2aa36ab6bb2e342a47ac9a19821f63ddf6e70897caf43d1e4380c37182b98da21a6415321eef83350cff5a24c9008aceb3feb86819990"}}, @link_id={0x65, 0x12, {@random="d2420b1dfa93", @broadcast, @broadcast}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x81, 0x40}}, @ibss={0x6, 0x2, 0x81}, @dsss={0x3, 0x1, 0xb1}, @challenge={0x10, 0x1, 0x65}, @preq={0x82, 0x36, @ext={{0x0, 0x1, 0x1}, 0x50, 0x5, 0x1, @broadcast, 0x39, @device_a, 0x9, 0x100, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0x2}, {{}, @broadcast}]}}, @chsw_timing={0x68, 0x4, {0xb4, 0x6}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}, @NL80211_ATTR_IE={0xfa, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9, 0x48}}, @measure_req={0x26, 0xeb, {0x2, 0x6, 0x8, "ae2e9ed502242a6e52a1bd9d5d1247a1a4d7f60226e3e179b188fbebda5d4b52c09bdb8de4e78fee428972386545fbcf46873e15de77b63d35ee17a4d58b4331a0c5a8bbc966b523b67eabc6e050b5730630edf35d700891090007f2eb42e26778470ac9cbdc84c9110aeb2bb425514a24f3efb4c4a76c6d94ea2e9772b92e42b5fa486b7e87856e2dbf330339edc57630231768754504a3babb819151377b1e1524a8d5d290b76ff4da2585085f2eb91045372fb2a4e3161effcb1f18a08895176e87aca47bfc96251d42af98d38f28d980266da02c779af4f441480d05c0654a6f3d9d6d739365"}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x60, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x401}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xca1b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0xa093358e5924e6fc}, 0x8000) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x108, r3, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9c, 0xbe, "5c267e9e6b21aace2f6b799fb45af85446a4d81764d6e6fe6cd15ad7b93229eacfa8e71a12274347066684293cbed1f11a78efcc951a4701468788d7ee33f0b0352e61e571ecb55aa216becb5608ec6853fc3972f0ab73362825a5c039cafba2b1cd04a745564ebff124aba2477e88e8c46c974b56b14d7bd097d031def08a40c518145defe4a596cbda5d579e181f7655842a12e0f41c24"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "ae2331162567f1706818240f51205ad2f7a9a31f6ae275c3b941e2966bfdddcea060548010643c6653b33aa9e9f6ca4a7eacbaa81224b56ed7"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8]}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 03:23:37 executing program 7: sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xc10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4044) socketpair(0x1, 0xa, 0xec0b, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x81}}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5a}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r4, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x9, 0x8000, 0x2b, 0x9, 0xff80, 0x3f]}, @NL80211_ATTR_FRAME={0x37, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @device_a, @device_a, @from_mac=@device_b, {0x5, 0x3}}, @ver_80211n={0x0, 0x81, 0x0, 0x0, 0x0, 0x1}}, @tdls_disc_req={0xc, 0xa, {0x30, {0x65, 0x12, {@random="66eae7b10eaa", @device_b, @device_b}}}}}}]}, 0x60}}, 0x6014) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r4, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "63128d35b5228db1"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x6, 0x4}, {0x39, 0x3}, {0x6, 0x2}, {0xff, 0x1}, {0x6, 0x3}, {0x82, 0x2}, {0x6, 0x1}, {0xe3, 0x4}, {0x5, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0x1f, 0x4}, {0x0, 0x3}, {0x3, 0x2}, {0x8, 0x6}, {0x81, 0x5}], "e00aaae75cf2c33b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x4, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0xd5, 0x5}], "f4b06ec26cec60b8"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x4c0001, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r7, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x19}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044089) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r8, &(0x7f0000000e40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f00000008c0)={0x514, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x148, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83be}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5323211e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb33b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd233}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35c13a16}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x702c3364}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdc2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ed3f69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x719cce44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15776761}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95b4}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d02}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f1a658b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x168f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75f5}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd69d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe745}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44551b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d307bd0}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18e7217c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dbb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x289a62ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2def8cb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6551319f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6d8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aa1ee34}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bbf1262}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7731abca}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b2b0f16}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x194, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fb0fb29}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f6f47b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fc82509}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65e92790}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76f77602}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x610a9ec0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46352f84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x385b7f13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaf63e93}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5389ff14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5521f5ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52ba7064}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10fc69fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x260740f9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4dde3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b37fb9b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30d53e48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541b5f21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78bbf60b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3489a57b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x144, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5333e1e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64357a34}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc00d5e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77313b32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c160a0a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7766ae49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49059b65}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50ff1ffe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1323fba7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a22ba24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25e36945}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52037e53}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792f67ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ba641d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4479740}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c12ec34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f691181}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120f6559}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x602db26}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a3a95a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x244bfd0a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6355735b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3bb81f}]}]}]}, 0x514}, 0x1, 0x0, 0x0, 0x20048000}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r5) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x98, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xe, 0x34, @random="497998b9156821faae1e"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "34f7d2d8b6"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x20}, 0x10000804) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xc0, r10, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_IE={0x92, 0x2a, [@ht={0x2d, 0x1a, {0x4000, 0x3, 0x7, 0x0, {0x401, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x800, 0x6, 0x3}}, @prep={0x83, 0x25, @ext={{}, 0x5, 0x4, @device_a, 0x9, @device_b, 0x6, 0x7c61, @broadcast, 0x4}}, @chsw_timing={0x68, 0x4, {0xff}}, @prep={0x83, 0x25, @ext={{}, 0x5, 0x6, @broadcast, 0x8000, @device_b, 0xfc4, 0x1, @device_b, 0xc}}, @cf={0x4, 0x6, {0x1, 0x8, 0x0, 0x5}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x78, 0x3}}, @cf={0x4, 0x6, {0x6, 0x6, 0x7, 0xdcc6}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x5010}, 0x801) [ 114.542994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.546400] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.549377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.554058] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.555919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.584904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.588546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.593885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.602408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.609017] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.616440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.621882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.624599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.632458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.650400] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.684551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.689843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.695992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.713042] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.717754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.721485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.722666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.726683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.729967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.735505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.760954] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.767519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.780899] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.783554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.790642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.800047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.802392] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.804456] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.819814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.824716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.828983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.831042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.847294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.849371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.852732] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.573642] Bluetooth: hci0: command tx timeout [ 116.701216] Bluetooth: hci1: command tx timeout [ 116.701962] Bluetooth: hci2: command tx timeout [ 116.766258] Bluetooth: hci3: command tx timeout [ 116.893298] Bluetooth: hci7: command tx timeout [ 116.894046] Bluetooth: hci5: command tx timeout [ 116.957306] Bluetooth: hci6: command tx timeout [ 116.957848] Bluetooth: hci4: command tx timeout [ 118.622215] Bluetooth: hci0: command tx timeout [ 118.749239] Bluetooth: hci2: command tx timeout [ 118.749711] Bluetooth: hci1: command tx timeout [ 118.814477] Bluetooth: hci3: command tx timeout [ 118.941300] Bluetooth: hci5: command tx timeout [ 118.941774] Bluetooth: hci7: command tx timeout [ 119.006419] Bluetooth: hci4: command tx timeout [ 119.006873] Bluetooth: hci6: command tx timeout [ 120.669946] Bluetooth: hci0: command tx timeout [ 120.797366] Bluetooth: hci1: command tx timeout [ 120.797821] Bluetooth: hci2: command tx timeout [ 120.861992] Bluetooth: hci3: command tx timeout [ 120.989350] Bluetooth: hci7: command tx timeout [ 120.989818] Bluetooth: hci5: command tx timeout [ 121.053434] Bluetooth: hci6: command tx timeout [ 121.053884] Bluetooth: hci4: command tx timeout [ 122.717220] Bluetooth: hci0: command tx timeout [ 122.845252] Bluetooth: hci2: command tx timeout [ 122.845709] Bluetooth: hci1: command tx timeout [ 122.909170] Bluetooth: hci3: command tx timeout [ 123.037398] Bluetooth: hci5: command tx timeout [ 123.037831] Bluetooth: hci7: command tx timeout [ 123.101191] Bluetooth: hci4: command tx timeout [ 123.101625] Bluetooth: hci6: command tx timeout [ 176.883871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.887385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.892722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.900442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.905031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.949937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.951332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.953729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.955872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.959829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.962187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.970050] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.971168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.974251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.985227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.029885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.037657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.070772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.071297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.077804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.082462] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.083619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.100243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.101097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.106565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.111573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.146056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.161762] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.162849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.164494] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.187442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.192561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.200720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.240248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.252272] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.265247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.272570] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.279016] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.290590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.324816] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.974280] Bluetooth: hci1: command tx timeout [ 179.037622] Bluetooth: hci2: command tx timeout [ 179.101409] Bluetooth: hci0: command tx timeout [ 179.167561] Bluetooth: hci3: command tx timeout [ 179.293435] Bluetooth: hci5: command tx timeout [ 179.294501] Bluetooth: hci4: command tx timeout [ 179.422353] Bluetooth: hci7: command tx timeout [ 179.423189] Bluetooth: hci6: command tx timeout [ 181.021458] Bluetooth: hci1: command tx timeout [ 181.086164] Bluetooth: hci2: command tx timeout [ 181.150272] Bluetooth: hci0: command tx timeout [ 181.213557] Bluetooth: hci3: command tx timeout [ 181.341274] Bluetooth: hci5: command tx timeout [ 181.341760] Bluetooth: hci4: command tx timeout [ 181.469211] Bluetooth: hci6: command tx timeout [ 181.469695] Bluetooth: hci7: command tx timeout [ 183.070419] Bluetooth: hci1: command tx timeout [ 183.133323] Bluetooth: hci2: command tx timeout [ 183.197643] Bluetooth: hci0: command tx timeout [ 183.261557] Bluetooth: hci3: command tx timeout [ 183.389277] Bluetooth: hci4: command tx timeout [ 183.390213] Bluetooth: hci5: command tx timeout [ 183.519513] Bluetooth: hci6: command tx timeout [ 183.520776] Bluetooth: hci7: command tx timeout [ 185.117225] Bluetooth: hci1: command tx timeout [ 185.181429] Bluetooth: hci2: command tx timeout [ 185.245448] Bluetooth: hci0: command tx timeout [ 185.311304] Bluetooth: hci3: command tx timeout [ 185.437614] Bluetooth: hci5: command tx timeout [ 185.439194] Bluetooth: hci4: command tx timeout [ 185.565401] Bluetooth: hci6: command tx timeout [ 185.565976] Bluetooth: hci7: command tx timeout [ 239.036271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.039769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.044666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.068192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.077391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.095965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.101502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.104076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.112452] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.114792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.121056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.125265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.130544] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.146341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.155622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.266946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.309188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.316614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.323563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.336610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.345624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.349914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.364192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.376664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.386727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.392529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.429467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.441570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.448452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.452557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.461705] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.470927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.473977] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.475508] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.478918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.489589] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.502712] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.508575] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.514788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.518505] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.181344] Bluetooth: hci2: command tx timeout [ 241.182324] Bluetooth: hci1: command tx timeout [ 241.182613] Bluetooth: hci0: command tx timeout [ 241.437844] Bluetooth: hci3: command tx timeout [ 241.439046] Bluetooth: hci4: command tx timeout [ 241.569305] Bluetooth: hci5: command tx timeout [ 241.757259] Bluetooth: hci6: command tx timeout [ 241.758038] Bluetooth: hci7: command tx timeout [ 243.229497] Bluetooth: hci0: command tx timeout [ 243.229786] Bluetooth: hci2: command tx timeout [ 243.229978] Bluetooth: hci1: command tx timeout [ 243.485258] Bluetooth: hci4: command tx timeout [ 243.485280] Bluetooth: hci3: command tx timeout [ 243.614270] Bluetooth: hci5: command tx timeout [ 243.805390] Bluetooth: hci6: command tx timeout [ 243.806563] Bluetooth: hci7: command tx timeout [ 245.277208] Bluetooth: hci1: command tx timeout [ 245.277330] Bluetooth: hci0: command tx timeout [ 245.278384] Bluetooth: hci2: command tx timeout [ 245.535171] Bluetooth: hci3: command tx timeout [ 245.535348] Bluetooth: hci4: command tx timeout [ 245.662165] Bluetooth: hci5: command tx timeout [ 245.853382] Bluetooth: hci7: command tx timeout [ 245.853862] Bluetooth: hci6: command tx timeout [ 247.325494] Bluetooth: hci0: command tx timeout [ 247.326797] Bluetooth: hci2: command tx timeout [ 247.326947] Bluetooth: hci1: command tx timeout [ 247.581312] Bluetooth: hci3: command tx timeout [ 247.582459] Bluetooth: hci4: command tx timeout [ 247.709335] Bluetooth: hci5: command tx timeout [ 247.902199] Bluetooth: hci6: command tx timeout [ 247.902241] Bluetooth: hci7: command tx timeout [ 301.680740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.684393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.689981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.701486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.705443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.881699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.885897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.889528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.909686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.921399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.941522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.945223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.948561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.959929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.978805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.012488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.020702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.044506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.066948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.074233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.127796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.129828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.133051] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.137723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.149659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.163213] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.179432] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.187220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.191632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.198852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.208561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.209594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.216613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.236784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.254576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.257584] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.264305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.276474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.380183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.405661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.773865] Bluetooth: hci0: command tx timeout [ 304.029318] Bluetooth: hci2: command tx timeout [ 304.029416] Bluetooth: hci1: command tx timeout [ 304.157413] Bluetooth: hci3: command tx timeout [ 304.350187] Bluetooth: hci7: command tx timeout [ 304.477515] Bluetooth: hci5: command tx timeout [ 304.548712] Bluetooth: hci4: command tx timeout [ 304.606645] Bluetooth: hci6: command tx timeout [ 305.821295] Bluetooth: hci0: command tx timeout [ 306.079344] Bluetooth: hci2: command tx timeout [ 306.079815] Bluetooth: hci1: command tx timeout [ 306.208150] Bluetooth: hci3: command tx timeout [ 306.397195] Bluetooth: hci7: command tx timeout [ 306.525216] Bluetooth: hci5: command tx timeout [ 306.589222] Bluetooth: hci4: command tx timeout [ 306.653237] Bluetooth: hci6: command tx timeout [ 307.870428] Bluetooth: hci0: command tx timeout [ 308.125373] Bluetooth: hci1: command tx timeout [ 308.125429] Bluetooth: hci2: command tx timeout [ 308.253356] Bluetooth: hci3: command tx timeout [ 308.446170] Bluetooth: hci7: command tx timeout [ 308.573683] Bluetooth: hci5: command tx timeout [ 308.638145] Bluetooth: hci4: command tx timeout [ 308.701390] Bluetooth: hci6: command tx timeout [ 309.917227] Bluetooth: hci0: command tx timeout [ 310.173574] Bluetooth: hci2: command tx timeout [ 310.173594] Bluetooth: hci1: command tx timeout [ 310.303194] Bluetooth: hci3: command tx timeout [ 310.493338] Bluetooth: hci7: command tx timeout [ 310.621217] Bluetooth: hci5: command tx timeout [ 310.686338] Bluetooth: hci4: command tx timeout [ 310.749391] Bluetooth: hci6: command tx timeout [ 363.905664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.912367] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.916389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.931648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.943675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.019021] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.022031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.025063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.031696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.035541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.149055] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.152379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.156568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.164735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.171966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.301910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.311047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.322699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.336447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.354379] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.362221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.390333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.404891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.416438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.420876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.423287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.431259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.436731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.522400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.554296] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.572026] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.575752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.589683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.593571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.595944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.598943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.603405] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.607733] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.690833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.748958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.981626] Bluetooth: hci0: command tx timeout [ 366.109506] Bluetooth: hci1: command tx timeout [ 366.237194] Bluetooth: hci2: command tx timeout [ 366.429410] Bluetooth: hci3: command tx timeout [ 366.493227] Bluetooth: hci5: command tx timeout [ 366.685494] Bluetooth: hci4: command tx timeout [ 366.687319] Bluetooth: hci7: command tx timeout [ 366.941603] Bluetooth: hci6: command tx timeout [ 368.029227] Bluetooth: hci0: command tx timeout [ 368.157214] Bluetooth: hci1: command tx timeout [ 368.285316] Bluetooth: hci2: command tx timeout [ 368.477238] Bluetooth: hci3: command tx timeout [ 368.541406] Bluetooth: hci5: command tx timeout [ 368.733513] Bluetooth: hci4: command tx timeout [ 368.733966] Bluetooth: hci7: command tx timeout [ 368.989235] Bluetooth: hci6: command tx timeout [ 370.078135] Bluetooth: hci0: command tx timeout [ 370.205370] Bluetooth: hci1: command tx timeout [ 370.333166] Bluetooth: hci2: command tx timeout [ 370.525627] Bluetooth: hci3: command tx timeout [ 370.589720] Bluetooth: hci5: command tx timeout [ 370.781451] Bluetooth: hci7: command tx timeout [ 370.781910] Bluetooth: hci4: command tx timeout [ 371.038314] Bluetooth: hci6: command tx timeout [ 372.125465] Bluetooth: hci0: command tx timeout [ 372.253181] Bluetooth: hci1: command tx timeout [ 372.381186] Bluetooth: hci2: command tx timeout [ 372.573322] Bluetooth: hci3: command tx timeout [ 372.638931] Bluetooth: hci5: command tx timeout [ 372.829387] Bluetooth: hci4: command tx timeout [ 372.829827] Bluetooth: hci7: command tx timeout [ 373.085177] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:28:46 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888036f17da0 RCX=ffffffff824cdab3 RDX=ffff88800be4d280 RSI=0000000000000001 RDI=ffffffff85e96760 RBP=0000000000000340 RSP=ffff888036f178f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff888036f17da8 R14=00007ffcd390ef48 R15=ffff888036f17da0 RIP=ffffffff825a52e4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f76ee4498e0 CR3=00000000249d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81b2315f RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888017237a01 RSI=ffff888017237aa8 RDI=ffff888017237aa8 RBP=ffff88806cf08a58 RSP=ffff88806cf08988 R8 =ffffffff8685f0fe R9 =ffff88806cf08a40 R10=000000000003b53d R11=00000000000231b1 R12=ffff88806cf08a60 R13=ffff88806cf08a48 R14=ffff888017237ab0 R15=ffff88806cf08a00 RIP=ffffffff81353293 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f68f2d966f4 CR3=0000000009be5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f68f2da547000007f68f2da4f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000