syzkaller login: [ 71.699959] sshd (241) used greatest stack depth: 23184 bytes left Warning: Permanently added '[localhost]:49067' (ECDSA) to the list of known hosts. 2024/10/21 21:09:19 fuzzer started 2024/10/21 21:09:20 dialing manager at localhost:45639 [ 73.623707] cgroup: Unknown subsys name 'net' [ 73.726315] cgroup: Unknown subsys name 'cpuset' [ 73.738878] cgroup: Unknown subsys name 'rlimit' 2024/10/21 21:09:37 syscalls: 206 2024/10/21 21:09:37 code coverage: enabled 2024/10/21 21:09:37 comparison tracing: enabled 2024/10/21 21:09:37 extra coverage: enabled 2024/10/21 21:09:37 setuid sandbox: enabled 2024/10/21 21:09:37 namespace sandbox: enabled 2024/10/21 21:09:37 Android sandbox: enabled 2024/10/21 21:09:37 fault injection: enabled 2024/10/21 21:09:37 leak checking: enabled 2024/10/21 21:09:37 net packet injection: enabled 2024/10/21 21:09:37 net device setup: enabled 2024/10/21 21:09:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/21 21:09:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/21 21:09:37 USB emulation: enabled 2024/10/21 21:09:37 hci packet injection: enabled 2024/10/21 21:09:37 wifi device emulation: enabled 2024/10/21 21:09:37 802.15.4 emulation: enabled 2024/10/21 21:09:37 fetching corpus: 0, signal 0/0 (executing program) 2024/10/21 21:09:38 starting 8 fuzzer processes 21:09:38 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x28e3) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) sendmsg$AUDIT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x300, 0x70bd29, 0x0, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000000}, 0x2404c8c5) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x268}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfa6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000840)) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "34ee334f16312a7d11747c4b5f0744d3"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5cb80a5db5ebb934e5ccda9fc09f0029"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "f1a72896f8bebd343e03fc7c61d0434a"}]}, 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x4) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, 0x464, 0x300, 0x70bd2c, 0x25dfdbfe, "e74b5210d0e498679b6fe9ede20bdc0b3bb354b1c430b804b8919685f6fed52348a3473fdccbef73e0fd6b84386879eba61acdad8f8d8815204c5818d56704f6025422394157a0915defaef7bce72c46c65e7f2197fddb210a6251c682f27c3de9d0a31a27c75478a50757218a3dfc232beaf11417dda0b0b422aaa5622d99a2", ["", "", "", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008004) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x10, 0x3f5, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2011}, 0x20044041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r3, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10000800) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001280), 0xffffffffffffffff) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f00000012c0)) sendmsg$AUDIT_USER(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x48, 0x3ed, 0x4, 0x70bd28, 0x25dfdbfd, "dba270192fc5b91400af31ffa20e14260893a0be0789fd2451dded6020cb401589653920ddc81c146f61043843a16dc389a3eb6295122599", ["", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x51cd566cd6d6f668}, 0x10) 21:09:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x129000) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x521400, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = socket$inet6(0xa, 0xa, 0x800) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f0000000100)="01c2306bd768999f2d9909c61c33c48016d432cfc567e1e178ceb5f8603a9d1017a0287c596ee870274e99a9381fbad709690e2f545010ea278730493d6988b80c3e92f3daf044918064e9220bda6a4690199be54b1cf0a748f5f5af3e1c1c532ef970064b86d0c67d4c0947460312c2586a65babe78e4d29c92a4ab3e97f46dfb57a5c9896c3f101b111217cb3945d6e36462c5f2", 0x95, 0xbcba, 0x0, 0x2}, &(0x7f0000000200)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000240)) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000280)=0x1) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x3, 0x2000) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000440)=0xe8) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000480)=0x1) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000004c0)) r4 = syz_open_dev$sg(&(0x7f0000000500), 0x5, 0x1) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000540)) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2881}, 0x90) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xa0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40040044}, 0xc004) 21:09:38 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x28}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="600260afa887"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2e}, @NL80211_ATTR_PMK={0x14, 0xfe, "e156ad538a4fa0fa046011f4b98a0f90"}, @NL80211_ATTR_PMK={0x14, 0xfe, "03edfd0aef6f48334afd3aa3a108fd34"}]}, 0x70}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000a00)) r2 = socket(0x25, 0xa, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x6c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x262}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008090) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket(0x6, 0x3, 0xfff) r4 = accept(r3, &(0x7f0000000bc0)=@rc, &(0x7f0000000c40)=0x80) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x22, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d5b8c01ec1ec"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f9ddf775f371"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x50}}, 0x4004040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f00000011c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000000e40)={0x32c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x30, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1e, 0xf5, 0x0, 0x4}}, @perr={0x84, 0x22, {0x80, 0x2, [@ext={{}, @broadcast, 0x8, @device_b, 0x3f}, @not_ext={{}, @device_b, 0x6, "", 0x32}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "17098ae2"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x20, 0xfc, "10e8f2d7e819d429dcb9989dfa6c7360d423f3e4295e6cf30fc39fc8"}, @NL80211_ATTR_FILS_ERP_REALM={0x5a, 0xfa, "0ef954429b5211248e01bee750a37632c3f0ca814ef9089e23fecfdb264d1f2355853ea517074c90f00a0c99ec0a9d5b0f9c2072092585b64776f103938e7d7ca268d4b46590e4b89782e8adbef0a04ca9453a752535"}, @NL80211_ATTR_FILS_ERP_RRK={0x9d, 0xfc, "529a8155a0bfb11fad8fbe3e668fa2c4feb3a51097bb683a6130de8b09f2d43a90d1e35d602fa27950c3c86b8ba407f6fdcb0e3be256e13d92af89f98f84b89fc1535dc2deacff380a7f45283d4f5ccac444694119d894e2708f89c8291de6b13a09ae486472107d3cf822eb6e52f4ba1c184bc93c2561b642152fed40233a3c1841c7031015121266439b5a1f7f10efbe91e88daf58537707"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "2e0712cccf7e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x20}, @NL80211_ATTR_FILS_ERP_RRK={0x45, 0xfc, "de4dd55d1d3a744401b9d7fd5db71f66de3e9d32e2f41d71507813886d9f8e22dacb6512c9860ea9ddeb18224589de676344a17dd64a5cd02a165d390eda499e3c"}, @NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "51a88f42faee20c42a535100caaa7a811068abfca504b2afc5d7085af129dbba9cae26230f50c81d624fd9592bf7f0f3ce665ff4aad47a01e5cfac434782d15d02b2356aa88015f216e4faec2379c2f87e2bd5941d5ed79f0bc30590358b9e1a9132d471ad2dbfa714f48ae79fe45ea4354dff0c87f2cf122ea1820904eced0e85e7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xa9, 0xfc, "89c46bf6a76ccd7d7acf6b34e6a00c864339946c9f02c87fde60edb66baa4a97c74983f07ee9d56933073ac1198488bee156f5c8fd7f753257ad979680a2724a682f4eb936f9bb26249de637d0f587b1f55aad1bd4cc058b24a1f041053c888f4e2c3a36bc6b370749de27e6e5523507a4b989d3e443b113c5696e5d9cdc08868d0db5f95ff04dd3f6894b98111f9406799f20edff00c0b680b34936f5bcbc5ec312f74d39"}], @NL80211_ATTR_IE={0x1c, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x81, @void, @val, @val="d76bca4eea7c55b036946d791982aa9d"}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4c055}, 0x20000010) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x10, 0x3fb, 0x8, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000001300), 0x0, 0x100) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000001340)=0xa1) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x58}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000001940)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001900)={&(0x7f00000014c0)={0x434, 0x3f3, 0x0, 0x70bd2d, 0x25dfdbfc, {0x5, 0x0, 0x0, [0x400, 0x80000000, 0x3f, 0x2, 0x2, 0x4, 0x1, 0x9, 0x0, 0x2, 0xfffffff9, 0x4, 0x7, 0xfffffffd, 0x1, 0x7f, 0x8000, 0x1f, 0xc0, 0x7, 0x8, 0x30, 0x2000000, 0x101, 0x2, 0x8, 0x80000000, 0x1, 0xffffffff, 0x8, 0x9, 0x9, 0x800, 0x6, 0x8, 0x4, 0x1ff, 0x2, 0x5, 0x3ff, 0x7, 0x6, 0xffff, 0x3, 0x80, 0xcd, 0xffffff00, 0x10000, 0x800, 0x5, 0x8, 0x3, 0x8000, 0x401, 0xffff0001, 0x80000001, 0x5, 0x9, 0x2, 0xf0a, 0x2, 0x0, 0x6], [0x6, 0x7, 0xa6a0, 0x8, 0x5, 0x8001, 0x1, 0x6, 0x59, 0x80000001, 0x8, 0x2, 0x81, 0x333f, 0x6, 0xfffffeff, 0xffffffc0, 0x20000000, 0x10001, 0x8001, 0x5e, 0x6, 0x3c26, 0x1000, 0x7fffffff, 0x1, 0x1, 0x1, 0xffffffff, 0x5, 0x1, 0x900, 0x0, 0x40, 0x9, 0x6cea, 0xff, 0x9, 0x3, 0x7d8c, 0x10001, 0xffffffff, 0x20, 0x3ff, 0x7fffffff, 0x1edc, 0x3, 0x0, 0x8001, 0x5, 0x7fffffff, 0x0, 0x2, 0x8000, 0x2, 0x8, 0x4, 0x7, 0x4, 0xf07, 0x8, 0x1f, 0x8, 0xffffff3a], [0xffffffff, 0x0, 0x9, 0x54, 0x80000001, 0xff, 0x1f, 0x80000000, 0xfffffffc, 0x101, 0xffffffd0, 0x5, 0x0, 0x1, 0x9, 0x3, 0x749, 0x10001, 0x8, 0x3ff, 0x7fff, 0x4, 0xff, 0x80000001, 0x24, 0x100, 0x68, 0x2, 0x6, 0xffff, 0xfff, 0x9, 0x80, 0x2, 0x1, 0x9, 0x1, 0x400, 0x4, 0x3, 0x1ff, 0x0, 0x5491, 0x1, 0x8, 0xf171, 0x2, 0x1, 0x6, 0x1, 0x8000, 0xfffffffa, 0x4, 0x5, 0x20, 0x6, 0x8, 0x401, 0x9, 0x4, 0x8, 0x401, 0x1, 0xfffffffe], [0xfffffff8, 0x9, 0x10000000, 0xb6, 0x1, 0x6, 0x80000000, 0x101, 0xf7, 0x7fc, 0xfa25, 0xffffff00, 0x0, 0xb, 0x80, 0x0, 0x40, 0x7, 0x2, 0x0, 0xfffffff8, 0xfffffffc, 0x7, 0x2, 0x6, 0x101, 0x3, 0x0, 0x3, 0xbf, 0x1e, 0xff800000, 0x9, 0xff, 0x7fffffff, 0x7, 0x7, 0x7fff, 0x0, 0x3, 0x3, 0x10001, 0x40, 0x8, 0x8, 0x30, 0x8, 0xd8e, 0x9b, 0x23, 0x512, 0x9, 0xfffffff7, 0x2, 0x7fff, 0xfffffffa, 0x9, 0x9, 0xffff, 0x0, 0x7, 0x85, 0x401, 0x2c5], 0x11, ['wlan1\x00', '{\x00', '/dev/sg#\x00']}, ["", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x8001}, 0x48005) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000001980)) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0xa}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x0) 21:09:38 executing program 3: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x300, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000081) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/12, 0xc}], 0x7}, 0xffffffef}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/197, 0xc5}], 0x1, &(0x7f0000000800)=""/85, 0x55}, 0x7}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/55, 0x37}, {&(0x7f00000008c0)=""/114, 0x72}, {&(0x7f0000000940)=""/99, 0x63}, {&(0x7f00000009c0)=""/170, 0xaa}], 0x4, &(0x7f0000000ac0)=""/174, 0xae}, 0xf69}, {{&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000c00)=""/169, 0xa9}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/122, 0x7a}, {&(0x7f0000001d40)=""/43, 0x2b}, {&(0x7f0000001d80)=""/169, 0xa9}], 0x5, &(0x7f0000001ec0)=""/193, 0xc1}, 0x50f}, {{&(0x7f0000001fc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002040)=""/176, 0xb0}], 0x1, &(0x7f0000002140)=""/215, 0xd7}}, {{&(0x7f0000002240)=@nfc, 0x80, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/174, 0xae}], 0x1, &(0x7f00000023c0)=""/181, 0xb5}, 0x1}], 0x6, 0x2002, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x28, 0x3f7, 0x100, 0x1ff, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x20004015) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000002840), 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x3b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000002980), &(0x7f00000029c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000002b00)={&(0x7f0000002a00), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x28, 0x0, 0x400, 0x9, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x54}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000002bc0)={'syztnl1\x00', &(0x7f0000002b40)={'ip6tnl0\x00', 0x0, 0x2f, 0x20, 0x0, 0x400, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, 0x10, 0x8000, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002c80)={'sit0\x00', &(0x7f0000002c00)={'ip6_vti0\x00', r4, 0x4, 0x6, 0x2, 0x4, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x80, 0x1, 0x3, 0xffffffff}}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = accept(r5, &(0x7f0000002e80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000002f00)=0x80) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40801) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000003040), 0x110000, 0x0) sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000003140)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x10, 0x3f8, 0x0, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x10000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003340)={&(0x7f00000031c0)={0x17c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x64}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x148, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7fff}, @from_mac, @device_b, @broadcast, {0x2, 0x6}}, @a_msdu=[{@device_b, @device_b}, {@broadcast, @broadcast, 0xbe, "9f48fc322092c0268144a5942cba51de7ad00c388438f7fe701e5ce42eb773a0543cc58ed8f27970337cb2f894052de5186d40ee1ef6c91c9c2e8f92c46a443fa1c6e4e5bbc9e67f70bbb011806a0bb05dedb3573779a2079db77427dc35ad10212141b11cb9eaf0f3aab401af697befb7168eca376aeab885a4d754d023da2d22d2e4b8055e465dc007500b4ccf771e78684008620b1589919bffea7a2afc05de855448bf7132d80ad4db73320e7d8306bd3da42ccd1f01e1a78ad1e603"}, {@broadcast, @broadcast, 0x12, "c5a8a8c55bb851f079c5b9d55090a11634ac"}, {@broadcast, @broadcast, 0x21, "6e2dbf4f4b7ac056fc48b2006207f2e0749a84016f6ee41f78eeb34e49512ab400"}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) [ 91.458473] audit: type=1400 audit(1729544978.771:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:09:38 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004800}, 0x20004840) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x200, 0x70bd26, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44010}, 0xe52597196bd2b2b7) r1 = socket(0x5, 0x800, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xe0, 0x453, 0x287d684af569f6ed, 0x70bd26, 0x25dfdbfe, "52e7aafc1842555a42ec506b9b07a0b56bbe26feb64fdc58b6823628ee93873538e3aa6ea1bd95849549cafc941255ff4ce889b7572c0b9066f973677caec0b48bfef723c2b760ebbd1c668394281a581b6c80471c85632203faf4f885ddc555526a4a8e7264fe0659d1cfb6e5944dbab8e52b21022174f451d42cbdd45833ef444889e208a5caf738728abd9d137ab5066e99ab9042f5fe4cb450e316cd2f37e39b5447b18e0c72fe9a3299006fb701d08720b2e1b305314609cf14e0fe76e6b36f20bf538d31b797b837decfb2e0a3", ["", "", "", "", "", ""]}, 0xe0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000002280)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002240)={&(0x7f00000020c0)={0x170, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd213}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9b23}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0xd4, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9fe4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4d5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdf12}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x170}, 0x1, 0x0, 0x0, 0x24040025}, 0x20004840) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000002780)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002740)={&(0x7f0000002300)={0x42c, 0x3f4, 0x100, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x7, [0x8, 0x2, 0x5, 0x5, 0x0, 0x6, 0xfffffff7, 0x800, 0x4, 0x8, 0x6, 0x8, 0x9, 0x2, 0x8, 0x400, 0x10000, 0x5, 0x800, 0xfffffff8, 0x6, 0x8000, 0x0, 0x6, 0x7, 0x5, 0xfff, 0x8, 0xfffffff9, 0xfffffff9, 0x10001, 0x0, 0xa2, 0x9, 0x1, 0x9, 0xbb, 0x9, 0x80000000, 0x40, 0xca, 0x8, 0x8, 0x1, 0xff, 0x8000, 0x200, 0x4, 0x9, 0x1000, 0x3, 0x5, 0xfc, 0x200, 0x8, 0x9, 0x5, 0x9d, 0x5, 0x800, 0x1, 0xd1ad, 0x8, 0x4], [0xb356acb, 0x3, 0x7fff, 0x3, 0x80, 0x54, 0x4, 0x0, 0x9, 0x2, 0x0, 0x9, 0x9, 0x6, 0x1a9f, 0x7e5, 0x3, 0x7, 0x9, 0x7, 0x4, 0x4, 0x2, 0x81, 0x6, 0x3f, 0x7, 0x5, 0x20, 0x6, 0xbf3, 0x4, 0x1000, 0x95, 0x8, 0x3, 0x5, 0x5, 0x84, 0xfffffc00, 0xe3a, 0x10000, 0xb8, 0x401, 0x7, 0x4, 0xfffffff8, 0xb4, 0x2, 0xf4, 0x6, 0xf73, 0x1000, 0xd27, 0x8001, 0xc1f, 0xfffffffe, 0x4, 0xe5b6, 0x9, 0x800000, 0xfff, 0x9, 0xdba2], [0x4, 0x0, 0x1, 0x6, 0x0, 0x5, 0x2, 0x0, 0xca61, 0x8, 0x1, 0x8000, 0x81, 0x7, 0x3, 0x9, 0x6, 0x6, 0x8, 0x5, 0x1, 0x10000, 0x10001, 0x2f, 0x9, 0x8001, 0x2224, 0x6, 0x10000, 0x9, 0xffff, 0x3, 0x1000, 0x80000001, 0x7fffffff, 0x3, 0x2, 0x7b, 0xfffff800, 0x1, 0x80, 0x6, 0x82, 0xfffffff7, 0x1, 0x7f, 0x9, 0x7ff, 0x5, 0x2, 0x5, 0x80000001, 0x1, 0x351c, 0x5, 0x1, 0x0, 0x6, 0x8, 0x9, 0x1, 0xffffffff, 0x6, 0x3], [0x8, 0x20, 0xa248, 0x5, 0x3, 0x2, 0x1, 0x0, 0x9, 0xff, 0x1, 0xffff, 0x0, 0xc9d9, 0x5, 0x8, 0x0, 0x0, 0x1c0, 0x401, 0x1, 0xfffff2bc, 0x3, 0xf2dd, 0x4, 0x5, 0x7, 0x40, 0x8a2c0000, 0x0, 0xdd5, 0x7, 0x2, 0x1000, 0x1f, 0x6, 0x6, 0xa0, 0x36, 0x3, 0x8, 0x5e, 0xa58, 0x7, 0x7f, 0x1, 0x5, 0xfffffffa, 0x3, 0x3f78, 0x2, 0x4383, 0x2, 0x2, 0x1ff, 0x1, 0xa5, 0xf64, 0x101, 0x5d, 0x0, 0x800, 0x2, 0xa8a7], 0xa, ['\x00', 'b\x00', '\x00', '*.-[*\x00']}, [""]}, 0x42c}, 0x1, 0x0, 0x0, 0x8800}, 0x4004000) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x4c, 0x0, 0xa20, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x34000080}, 0x4048000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002ac0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x44000018}, 0xc, &(0x7f0000002a80)={&(0x7f0000002980)={0xfc, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20c}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc0, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x89, 0x3, "45de34df9df085481dc4ed600778a4f99f29d588f9eac33a92ac45a84bdbe6a9cf8454d95702bf08269e49e8e118f32ca4b325c4fb6af13219e64977615e657288d88c0a154ded07d3d148fb66b45af3c1be70254411ce1b65f194800153fe6477b4ae09bd83e8a5b28e81ee98a3af03183c47be21d17082df748b979d0e49815c1b7ea7a9"}, @NL80211_BAND_2GHZ={0x2d, 0x0, "0d80c033a33bf794eb3f21eecc88d639bd58db78c89427abeb69dc233d5656c5e902aeb7931018d9ed"}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40004) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002c40), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x4c, r4, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8011}, 0x41) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) r5 = syz_open_dev$sg(&(0x7f0000002e80), 0x1f0, 0x60080) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000002ec0)) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x8000) r6 = syz_open_dev$sg(&(0x7f0000003000), 0x40, 0x80000) ioctl$SG_GET_SG_TABLESIZE(r6, 0x227f, &(0x7f0000003040)) 21:09:38 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x58}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x40010) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x6671b723c6ccbd8a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x76}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x809}, 0x60008000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x344a, 0x39}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000500)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1b8, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x169, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb1, 0x8}}, @perr={0x84, 0x147, {0x20, 0x13, [@not_ext={{}, @device_b, 0x9, "", 0xd}, @ext={{}, @broadcast, 0x80000001, @broadcast}, @ext={{}, @device_a, 0x8001, @device_b, 0x11}, @ext={{}, @broadcast, 0x0, @device_a, 0x1b}, @ext={{}, @device_a, 0x80000001, @device_a, 0x25}, @not_ext={{}, @device_a, 0xff, "", 0x6}, @ext={{}, @device_b, 0xffff, @device_b, 0x40}, @not_ext={{}, @device_a, 0x101, "", 0x38}, @ext={{}, @broadcast, 0x4, @device_a, 0x23}, @ext={{}, @broadcast, 0x14, @broadcast, 0x5}, @ext={{}, @device_b, 0x6, @device_a, 0x38}, @not_ext={{}, @device_b, 0x5, "", 0x27}, @not_ext={{}, @device_a, 0x1, "", 0x35}, @ext={{}, @broadcast, 0xfff, @device_b, 0x11}, @ext={{}, @device_a, 0x70, @device_a, 0x1a}, @ext={{}, @device_a, 0x9, @device_a, 0xd}, @ext={{}, @device_a, 0x8, @device_b, 0x3}, @not_ext={{}, @device_a, 0x39f9fb2b, "", 0x28}, @ext={{}, @device_b, 0xfff, @device_b, 0x3f}]}}, @rann={0x7e, 0x15, {{0x1, 0x2a}, 0x0, 0x9, @device_a, 0x0, 0x4, 0xcf}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1ae6b8c0d0f2"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4028100}, 0x20040015) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe4, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x212681, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b40)={0x564, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x7, 0x9}, {}, {0x0, 0x9}, {0x3, 0xa}, {0x6}, {0x6, 0x3}, {}, {0x1}, {0x6, 0x4}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x2, 0x1}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x12, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7f, 0x5ff, 0x7, 0x8001, 0x7ff, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f5b, 0x6, 0x1ff, 0x8, 0xfffd, 0x81, 0x7, 0x200]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x377, 0x1f, 0x83f0, 0x81, 0x100, 0x1]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x1b, 0x24, 0x49, 0xc, 0x1b, 0x3, 0x2, 0x30, 0x3, 0x6c, 0x18, 0xc, 0xb, 0x48, 0x1b, 0x12, 0x24, 0xb, 0x6c, 0x1b, 0x6c, 0x2, 0x2, 0x3, 0x1, 0x6c, 0x1]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f5, 0x1, 0x4ad, 0x8, 0x9, 0x8000, 0x20, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x2, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0x100, 0x55, 0x5, 0xfffe, 0x7f, 0x6]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x9}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0xa}, {0x2, 0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x6, 0x5}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x7}, {0x6, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x3, 0x1}, {0x5}, {0x5, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x4}, {0x7, 0x2}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x18, 0xc, 0x16, 0x48, 0xc, 0x2]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x12, 0x3, 0x1b, 0x18, 0x6d, 0x3, 0x36, 0x0, 0x6, 0x18, 0x1b, 0x1b, 0xc, 0x2, 0x36, 0x18]}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0x3}, {0x0, 0x6}, {0x5, 0x7}, {0x3, 0x1}, {0x7, 0x9}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x7}, {0x6, 0x4}, {0x4}, {0x2, 0x3}, {0x3, 0x2}, {0x3, 0x4}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0x5}, {0x4, 0x2}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x3}, {0x4}, {0x5, 0xa}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x2, 0x9}, {0x6, 0x9}, {0x7, 0x4}, {0x5}, {0x4, 0x3}, {0x5, 0x4}, {0x1}, {0x2, 0x1}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x0, 0x45, 0x30, 0x18, 0x30, 0x36, 0x1, 0x6c, 0x48, 0x30, 0x1, 0x3, 0x12, 0x6c, 0x16, 0x4, 0xc]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x7}, {0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x7, 0x3}, {0x0, 0x9}, {0x7, 0x4}, {0x7}, {0x4}, {0x3}, {0x7, 0x1}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x0, 0xde98, 0x5, 0x4, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x6}, {0x2, 0x8}, {0x3, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x3, 0x6}, {0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x5}, {0x0, 0x3}, {0x5}, {0x7, 0x3}, {0x5, 0x9}, {0x5, 0x4}, {0x5, 0x5}, {0x3, 0x2}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x7, 0x5}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0x1}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x3}, {0x4}, {0x2, 0x9}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x26, 0x18, 0x4, 0x12, 0x0, 0xc, 0x60, 0x2, 0x6, 0x5, 0x60, 0x6c, 0x60, 0xc, 0x60, 0x0, 0x16, 0x60, 0x6, 0x30, 0x6]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x24, 0x4, 0x6, 0x1, 0x6, 0xc, 0x12, 0x18, 0x4, 0x7d, 0xc, 0x2, 0x16, 0x6c, 0x30, 0x2, 0x1, 0x36, 0x36, 0x2, 0x3, 0x33, 0x36, 0x9, 0x5, 0x4, 0x6, 0x6c, 0x6c, 0xb, 0x16]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0xa}, {0x0, 0x4}, {0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x3, 0x7}, {0x2, 0x8}, {0x4}, {0x6, 0x8}, {0x7}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x4}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x2}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x24, 0x48, 0x16, 0x0, 0x48, 0x18, 0x4, 0x2, 0x18, 0x12, 0x12, 0xc, 0x1, 0x60, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x4, 0x30, 0x16, 0x30, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x6}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x1}, {0x1, 0x4}, {0x5, 0x2}, {}, {0x0, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0xa}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x7}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x48, 0x36, 0x3, 0x2, 0x36, 0x21, 0x33, 0x6c, 0x36, 0x1b, 0x36, 0xc, 0x16, 0x30, 0xc, 0x36, 0x60, 0x5, 0x18, 0x6c, 0x1b, 0x8d68fb6faa55e37a, 0x44, 0x3e, 0xb, 0x6, 0x4, 0x6, 0x6c, 0x1, 0x12]}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8122, 0x1, 0x3, 0x2, 0x9d, 0x2, 0xd8]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x8}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x5}, {0x6, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0x3}, {0x2, 0x2}, {0x5, 0x5}, {0x3, 0x9}, {0x6, 0x8}, {0x2, 0x5}, {0x1}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0xa}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x1}, {0x7, 0xa}, {0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x3, 0x8}, {0x5, 0x4}, {0x4, 0x19}, {0x4, 0x6}, {0x2, 0x1}, {0x5, 0x6}, {0x6, 0x6}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x6}, {0x4, 0x1}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x5}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0xa}, {0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x2, 0x8, 0x5, 0x341, 0x8, 0xe9]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0xa}, {0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x4}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x1}, {0x6}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x5}, {0x1, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x800, 0x7f, 0x4, 0x527d, 0x101, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x30, 0x6c, 0x0, 0x3, 0x6, 0xc, 0x2, 0x9, 0x1b, 0x16, 0x6, 0x30, 0x1, 0x24, 0x24, 0x6, 0x4, 0xc, 0x36, 0x48, 0xc, 0x24, 0xb, 0x12, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x36fc, 0x3ff, 0x2, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0xc, 0x24, 0x60, 0x48, 0x24, 0x16, 0xb, 0x2, 0x6, 0x24, 0x60, 0x9, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x86, 0x1, 0x2, 0xfc, 0x8, 0xfffe, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x1b, 0x18, 0xc, 0xb, 0x36, 0x3, 0x0, 0x15, 0x48, 0x9, 0x1, 0x18, 0x5, 0x18, 0x36, 0x30, 0x0, 0x60, 0xf]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0xb, 0x5, 0x6c, 0xc, 0x9, 0x16, 0x1b, 0x60, 0x6c, 0x2, 0x6c, 0x1, 0x6c, 0x77, 0x56, 0x6, 0x48, 0x4, 0x24, 0x5, 0x4, 0x24, 0x18, 0x4, 0x3, 0x6c, 0x30, 0xb, 0x2, 0xb, 0x2]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x12, 0x1b, 0x48, 0x12, 0xc, 0x3, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0x401, 0x81, 0x1f, 0x400, 0x6, 0xfe00]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x3, 0x9, 0x2, 0x6c, 0xb, 0x16, 0x60, 0xe, 0x24, 0xc]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0xb, 0x36, 0x16, 0x2, 0x4, 0x37, 0x9, 0x47771bac4090ac35, 0x4, 0xc, 0xc, 0x0, 0x6c, 0x14, 0x60, 0x4, 0x6, 0x3, 0x1, 0x3, 0x30]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x9}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x3}, {0x1, 0x8}]}]}]}]}, 0x564}, 0x1, 0x0, 0x0, 0x8000}, 0x20000140) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x20000014) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x81, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000001340)) r4 = socket(0x1, 0x6, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r3) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000001540)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1900000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xd0, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1ff, 0x6c}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "18e1f244882d740546dca213"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e7620e12e6"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3f2640499e28c5d9d1fc9a7b6e"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8040000}, 0x40000) syz_genetlink_get_family_id$smc(&(0x7f0000001580), 0xffffffffffffffff) 21:09:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000035c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003580)={&(0x7f0000001fc0)={0x15b8, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb5b, 0x29}}}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @ctrl_frame=@ba={{}, {0x3f4}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0x4, {0x3, 0x7f}, "ac4c3df9acd504fd"}, {0x0, 0x1, {0x2, 0x1}, "eb1ba687ffe93757"}, {0x0, 0x9, {0x9, 0x9}, "158fb442decc5b81"}], {0x0, 0xc, {0x3, 0x3b5}, "72ac9e6c2b655b17"}}}}, @NL80211_ATTR_FRAME={0x1284, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @device_b, {0x4, 0x5}}, {0x4, 0x1, 0x0, 0x0, 0x3a}}, {@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x7ffa}, @device_a, @device_a, @random="819aae5cf045"}, {0xf, 0x1, 0x0, 0x1, 0x8}}}, @ver_80211n={0x0, 0x6, 0x3, 0x2}}, @a_msdu=[{@device_a, @broadcast, 0x17, "9c5b6c96a1cfdf070c8f78ede3e55eb948b256ccaa344b"}, {@device_a, @broadcast, 0x37, "63f799a2c9a71de778192e0d3e02ae96b2343939a240512630d5254d9612f49b295e93ae44fb610f2b538b58a18914b1b18980b8acacae"}, {@broadcast, @device_b, 0x4b, "e752ceebf1375620de536daebed49823526e450511f6172bc2c5de696c15b37ad8e030aa5a92927a04f05afd061edb27401f3ecd29dfbc529c1d07e6ec5fefe544a5ef5a60a233c783e81e"}, {@device_b, @broadcast, 0x2e, "19c3c0a0e7ec0994e9cc59ceefab8267bc5c8fe82736853123ec7191a37f81eb93612f0a6e30238a1679a94c6de0"}, {@device_b, @device_b, 0x2b, "77fbe12d00f62149ea0b14f4948819c98073e5d3cee36ee44730bd7a018bcf755ca355f763d2bd6cccb426"}, {@device_a, @device_a, 0x1000, "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"}, {@device_b, @device_b, 0xd7, "41bd0b4354e8179597e75879d0ababca1c5b12436fa3152cec282703ab4668efcd2238b0e636ab8be5bdbc671970315f9cce55f72bde008663c1eff7767e52c8d73e5ab27695fa2a2c58004eb1aeb9846eb319e640a6f6eb5c67cb43f68a27686fb5622bbc3c7bdea8e7a148ef357ea6469dde8bc3c426b6123fa02c4553d7e872a60807bf9b71aee79fa32b410f55a898a3e8b208fe78c2805bf937e166c4abe05a427112c64e03acf3a33b96a918d8375014d9217e9c9fceadaa42f8cccebda4921ec46030e318ee819c9f0cf5386d04cd158bb6bfc4"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_FRAME={0x2be, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_b, @random="de6cfba72810", @device_a, {0xf, 0x5a4}}, {0x7, 0x0, 0x1, 0x0, 0x20}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_a, @random="cd7cb12e67c0", {0xf, 0x1f}, @broadcast}, {0x1, 0x0, 0x2, 0x1, 0x7}}}, @ver_80211n={0x0, 0x4000, 0x0, 0x3, 0x0, 0x3}}, @a_msdu=[{@broadcast, @device_b, 0xe2, "bde5bded3733bce92700922aef8834137025b8de06eb80172f878de17c270e42f7ce9d4c417b2066549a5eee2101202d3f939b12a82962d29d2c675a287ad88fa559c811175035af2fdcabd72bdbfe604f417a88fe302fa70d058005e3b4d11d2316b75fa26b577f75e9d26772c456d069a6863d1838029bc620e4fd221f25ca6d1cb8894b28ff965ab23d9400b927d2f4692982121ea1412dcf4c7ba76c36b68a24dac62c8308e276b93d849d0a32b01872f15db4ac9bd3fb5dd78d65640aa8386b1c9e1c25c6ef538c77b97e3d53692e95f59905ae1033c343d61224564b8a54db"}, {@device_b, @device_a, 0x60, "8e95b6bb5360eec138d0c75effb97957b9f401c9d9d5a5cddd216778093eaddfe03061cf5d6fc1b632a9d8480d255ced95e8a6637c70d3d72a7d02a6a45f25a4ca0bdbf3ad44f4bcc83b884ba585bee7842826f00b0cd6c0a54b6e4ee844aa4c"}, {@broadcast, @device_a, 0xa4, "2ada83740f700c1d73f17192a7c1f62aaf841f7f3af7f95952c04e4509c98ba11fd3915f1415efe5750434891bdfa6cdeb55f360f5dd5edef342e64d8d5186e47c2bec9e88a420ce3ce0c584d59b8432fc16fb57d11b4cfd6c5a87113a84426989069432d0adfc9aafd4232bf8cac4081bf198b25ac022ae99d93654288db8120d7d431db3c095a3e9f48679c27b4ad49283304a9935ccc12a159c8c70dd08c64d3473c5"}, {@device_b, @broadcast, 0x59, "bdacf737bdfce09c7faf2486964dd1ee4809ff2eb5fa975587d4359d933b79d3f25ac3c993ed61729b27398137827f98fcdfc9a1142ca215fef511965b577e3598c22fa65fb57fae8dce0ca9e878ecbee40173b806d16980e9"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x15b8}, 0x1, 0x0, 0x0, 0x8005}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000038c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003880)={&(0x7f0000003640)={0x21c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x38, 0x27}}}}, [@NL80211_ATTR_VENDOR_DATA={0xdc, 0xc5, "155ca71296d5fc9d892e1e4004474d3dd8b255e7645c3d1a2ca2a0e29d2b7be047691b004660c7d2dbd11b4872b6352da30d8acf781fee12f41dd474b8ded54bab033f025f4ed349b6deba3f29836db96b2a4f95ad6824dcc58f6df0fb817da7b15f3cf987aa859be3ddfa8c8c88fcba917c6d09b0d995f9b94a17560aa7dfafef9067172c1c84460c128ce4eb3ec76c497f66726b0cf3962657e662b2166d70c59ed407e83266169df57481e0a70e4dc7ccdde9a5673af5eb25ce0adacdc2aac2ea3e79025356423c97011d24c3f3f162353496040ffd04"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80000000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3c97}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7ff}, @NL80211_ATTR_VENDOR_DATA={0xed, 0xc5, "954be293f8aae2231bde9decc744ccda6072a4488247af88816e403d477adf3aa2ad1f6822a12deee122cb2bb1ab9db5ffb396c9b859a7b5f5d1a37c1e8b00cba95a5af162fca9b28a02eb3bd74b305c3d4708be5931f9167316590c205fa72183bcf00c6bb39e9a053fd7443d03ad99ce1c727cc5612b9c2a0ffa88c634d8573221d37df094ab38733b31ba53086ac4c99f8d5e15e2424f951d944c3421d9d67b7015ccab6f18352ee282655f1862785a94b9b5b8bc6b4c68eae44421c1f99a50360bdeab2dc03ac2e903f9918c153aa7c033afabf6e6ec2930e7b906d48e461efb812d5393384235"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x801) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x50, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x10, 0x3e8, 0x40d, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x600000d4}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000003b40), 0x254141, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x30, 0x3ed, 0x200, 0x70bd29, 0x25dfdbff, "b67db4350f750fbf49fd36e635170b6fa296c369b4f68a4dbee891d0e4deb413", ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x82}, 0x80) recvmmsg(r2, &(0x7f0000009240)=[{{&(0x7f0000005ec0)=@nfc, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005f40)=""/128, 0x80}], 0x1, &(0x7f0000006000)=""/159, 0x9f}, 0x3ff}, {{&(0x7f00000060c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000006400)=[{&(0x7f0000006140)=""/167, 0xa7}, {&(0x7f0000006200)=""/45, 0x2d}, {&(0x7f0000006240)=""/173, 0xad}, {&(0x7f0000006300)=""/241, 0xf1}], 0x4, &(0x7f0000006440)=""/154, 0x9a}, 0x5}, {{&(0x7f0000006500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000006580)=""/97, 0x61}, {&(0x7f0000006600)=""/78, 0x4e}, {&(0x7f0000006680)=""/74, 0x4a}, {&(0x7f0000006700)=""/237, 0xed}, {&(0x7f0000006800)=""/92, 0x5c}, {&(0x7f0000006880)=""/226, 0xe2}, {&(0x7f0000006980)=""/246, 0xf6}, {&(0x7f0000006a80)}], 0x8}, 0x80000000}, {{&(0x7f0000006b40)=@vsock, 0x80, &(0x7f0000007000)=[{&(0x7f0000006bc0)=""/186, 0xba}, {&(0x7f0000006c80)=""/225, 0xe1}, {&(0x7f0000006d80)=""/165, 0xa5}, {&(0x7f0000006e40)=""/170, 0xaa}, {&(0x7f0000006f00)=""/33, 0x21}, {&(0x7f0000006f40)=""/157, 0x9d}], 0x6, &(0x7f0000007080)=""/4096, 0x1000}, 0xffffff36}, {{0x0, 0x0, &(0x7f0000008200)=[{&(0x7f0000008080)=""/70, 0x46}, {&(0x7f0000008100)=""/242, 0xf2}], 0x2, &(0x7f0000008240)=""/4096, 0x1000}, 0x8}], 0x5, 0x0, &(0x7f0000009380)={0x77359400}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000009500)={&(0x7f00000093c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000094c0)={&(0x7f0000009400)={0xac, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x8}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80}]}, @NL80211_ATTR_IE={0x7c, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @cf={0x4, 0x6, {0x8f, 0x7f, 0x8, 0x1}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x80, @broadcast, 0x2, "", 0xffffffba, 0x4, @device_b, 0x8}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x2, 0x22, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0x4, 0x9}}, @dsss={0x3, 0x1, 0xe}, @ht={0x2d, 0x1a, {0xc, 0x3, 0x0, 0x0, {0x5, 0x8, 0x0, 0x7, 0x0, 0x1, 0x1, 0x2}, 0x6, 0xe7, 0x3}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8361}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000095c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000096c0)={&(0x7f0000009540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000009680)={&(0x7f0000009600)={0x64, r4, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x54}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x64}, 0x1, 0x0, 0x0, 0x40840}, 0x14) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000009700), 0x0, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000009740)=0x2, &(0x7f0000009780)=0x1) accept(r1, 0x0, &(0x7f00000097c0)) bind$bt_sco(r3, &(0x7f0000009800), 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009880), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000098c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000099c0)={&(0x7f0000009840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000009980)={&(0x7f0000009900)={0x70, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "51d5a80823a44ce8ce480ee4d1354787"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "0e2bf440156d49a58f9e9ffbfd0060e7"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "bb23ff6c6f7e26193423b716ea0aaa99"}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x10008014) 21:09:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, r1, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1f, 0xfa, 0x20}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x81, 0xd}}, @supported_rates={0x1, 0x8, [{0x48}, {0x3, 0x1}, {0x1}, {0x24}, {0x24, 0x1}, {0x6, 0x1}, {0x1}, {0x16, 0x1}]}, @chsw_timing={0x68, 0x4, {0x800, 0x26c}}, @random={0x0, 0xd9, "b03158c4dbc2249a8833c73442127f8b1ba911dad1299611a81b6519bbf26c730a6695491dc1445ecbeb3aa1a5f76fb34b379e2dd8d2b843b300ef088953693475b148fc11576664c16e7fd4b834293fb00d074dcb8df46040813b4921d6eb7b0802873ea94572e41ee54c98517b859a72b35e2668c2ecf001a010947bfbd08b66911fed0822687b7dc35a1a1c3af7b661651f316437aa05325ae71a925c003a154810f028a8cc4e10684c34f01120ce4d157e0ef91cb31b47b7cf5759ec396b103f101f242bfb937998db714bcee14a64da3aabfc6872e338"}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r1, 0x102, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6007}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x86dd}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xbc, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x61, 0x2a, [@cf={0x4, 0x6, {0x3f, 0x28, 0x8001, 0xb3ee}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x12, 0x7c, 0x5}}, @preq={0x82, 0x46, @not_ext={{0x1, 0x1, 0x1}, 0xe4, 0x0, 0x738a, @device_b, 0x3, "", 0x81, 0x6a57, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0xffff0f4f}, {{}, @broadcast, 0x132ee000}, {{0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x10000000}]}}, @supported_rates={0x1, 0x2, [{0x2, 0x1}, {0x18}]}, @challenge={0x10, 0x1, 0x63}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40040}, 0x20000040) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000540)) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x20000000, 0x18}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x363}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20001800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xeae}, {0x8, 0x0, 0xfffffffc}, {0x8, 0x0, 0x1}, {0x8}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40200c0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x19}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8052) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000fc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000980)={0x5cc, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_IE={0x84, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x9, 0x1}}, @dsss={0x3, 0x1, 0xad}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x6e, {0x7, 0x1, 0x93, "bec3da8339cf2519016b51ba4b70cc19aadb947784e3ad3687e86ef6cf3b87aa7dd1458b54bdedaa42e855abb4e297bfd4469d00b9a4c3d84aecf742b23d9fb1737cc7608ab265736ebafbe6aea6d14944b889d94245ffbf935bd5407f99bc4e815bfb3e230701fa0e6377"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x58, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x2, 0x21}}, @tim={0x5, 0x49, {0x0, 0x66, 0xfc, "3e5fbc4aeb944c319700fc5e784b6465f86bf85dd2e34d4a4357022922fd8671a9068b5e47dc2ba44c6edc79e001c7ba19a725ba52516229e29bacb18c8b63740fc9067600ae"}}]}, @NL80211_ATTR_IE={0x121, 0x2a, [@preq={0x82, 0x83, @ext={{0x1, 0x0, 0x1}, 0x9, 0x7e, 0xffffff5e, @device_b, 0x46bd, @device_a, 0xf8e, 0x2, 0x9, [{{0x1}, @broadcast, 0x4}, {{0x1}, @device_b, 0x80}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1}, @broadcast, 0x8000}, {{}, @broadcast, 0x1}, {{}, @device_b, 0x6}, {{}, @device_a, 0xfffffff8}, {{0x1}, @device_a, 0x1}, {{}, @device_b, 0x5}]}}, @measure_req={0x26, 0x93, {0x8, 0x9, 0x2, "162626501f110f7dcdce0a0009ca2b8b26e9b8df5c4e6abcdc8efc7dc0d20abe0dd282d0359bf054240bf0be49005d93e20dd244e96fc487aa2556e95004945515c8610d42166f11bf301b16753d8ca62a15930b6aaa49b0e0cc99d69fbafecdb5b69b5e2b5c8d04846cd58a01730328bcdc4594efd87aec01b3d1b7c7594a52ba8813f981a0766bcbf3eed4306ac304"}}, @challenge={0x10, 0x1, 0xde}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_IE={0x7b, 0x2a, [@measure_req={0x26, 0x75, {0x80, 0x1, 0xed, "79480e1385d50814ea373241f8f008465676c2d2327436cf398c9fa7b2f22bcd000b187a24e55193a05645ec391d8038522efc5e1372aec3ed839282081356dff20bc480ddd496d91d49fb3cb71854de6a7f208a0b8cd7f33f18e206ae2f752d30953eafc6c137a179130992a1b8c5213c99"}}]}, @NL80211_ATTR_IE={0x36, 0x2a, [@preq={0x82, 0x30, @not_ext={{0x1, 0x1}, 0x4, 0x2, 0x7, @device_a, 0x1, "", 0xffffffff, 0x9, 0x2, [{{0x1}, @broadcast, 0x3}, {{0x1}, @device_b, 0x3}]}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@chsw_timing={0x68, 0x4, {0xd6a, 0x6}}, @rann={0x7e, 0x15, {{0x0, 0x51}, 0x5, 0x7, @broadcast, 0x0, 0xfff, 0x20}}]}, @NL80211_ATTR_IE={0x170, 0x2a, [@supported_rates={0x1, 0x8, [{0x1b, 0x1}, {0x48}, {0xb, 0x1}, {0x7d, 0x1}, {0x12}, {0x30}, {0x2}, {0xc, 0x1}]}, @gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x7f}, @random={0x5, 0x8b, "a160b9e640f358f0a1dff4ec344aab6b0d3086c997382299bcd985b3d839cbc067033b3f44e2376cb3ab6b01bd504d0d1a74f5b5263e8e329b786ff609d83d9a78621c45a7d041395ca520177100743db6333459e5655ea0e7d48c8f25ac5586dc65215281867aefd16d8e2eb28ec8f36f1aff5b57e32126d5b718c2bfe47e784e4188ad55eeacf19478b9"}, @tim={0x5, 0xba, {0xab, 0x8b, 0x6, "e199003578cd4e2309be123846fd0a1efc2f439b738cfbb74d33bd7d718436da26b03724d524024ea785e15da30d1ff56acdcd954eae82f634bd30c809747d663e6015b2d55ee4b7c464067e0ddf060dc42b85138e890db986f8ef3980194f7253f1ecb990c07286fa9be8ca223e2353dab3e8e39e06ca9f65cd787fb753bfc1ed22928d1816f73095f7cfaf15f0e314456dbb60cfeec343a7ea83e3c3fe7c8348a58bf3d605506a3df183009c7af65f999fb6dc11b5c8"}}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0x7c}]}, @NL80211_ATTR_IE={0x14b, 0x2a, [@perr={0x84, 0x12f, {0x3, 0x13, [@not_ext={{}, @broadcast, 0x7fffffff, "", 0x7}, @not_ext={{}, @broadcast, 0xfff, "", 0x14}, @ext={{}, @device_a, 0x2, @device_a, 0x29}, @not_ext={{}, @broadcast, 0x1acdfb67, "", 0x2f}, @ext={{}, @device_a, 0x20, @broadcast, 0x2}, @not_ext={{}, @device_b, 0x4, "", 0x3d}, @not_ext={{}, @device_a, 0x5, "", 0x1}, @not_ext={{}, @device_a, 0xd1ca, "", 0x1f}, @ext={{}, @device_a, 0x992, @broadcast, 0x30}, @not_ext={{}, @device_a, 0x0, "", 0x5}, @ext={{}, @device_a, 0x6, @broadcast, 0x2b}, @not_ext={{}, @broadcast, 0x8, "", 0xb}, @ext={{}, @device_a, 0x1, @device_b, 0x39}, @ext={{}, @device_b, 0x0, @device_b}, @ext={{}, @device_a, 0x7, @device_a, 0x9}, @ext={{}, @device_b, 0x0, @device_b, 0x3b}, @ext={{}, @device_b, 0x8ffc, @device_a, 0x27}, @not_ext={{}, @device_b, 0x4, "", 0x3f}, @not_ext={{}, @broadcast, 0xa6d, "", 0x29}]}}, @peer_mgmt={0x75, 0x14, {0x1, 0x7d, @void, @void, @val="2e212e7785319e8f128003c2c8fb028e"}}]}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x810}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r4) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40001040}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xec, r5, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @void, @val={0xc, 0x99, {0x9, 0x7f}}}}, [@NL80211_ATTR_VENDOR_DATA={0xbb, 0xc5, "9a060b2c7b957b4405907dd75f51a24be8f29167e6e48c49c62ac3f60a01637eb1fea1bb7406e26e8c24be7148c7cfc8a6e56a057965d8769fe9a9b14aebedb4d57ad3692f23cef24fe903a0998d3e410307554d437af1e472feb77d8f43a9b120ae61bfe63d6f18ec820323d8363ff8d16374d79e585a271d2b4f09e6b3ebeb9e1a0a7773418a4c0eb98072c6e933ca95c2b61b6d974fef0a1c8208fb5d6e89ef4cc19a022ea30fee426f145b4b3eaddfcd4f255cc93a"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x61}]}, 0xec}, 0x1, 0x0, 0x0, 0x24040040}, 0xc041) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x64, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@crypto_settings, @NL80211_ATTR_SSID={0x19, 0x34, @random="5f539aa21796077dad869d6ca7abc94d032c336c90"}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xb}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000003e00), 0x10000, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e80)={0x78, r3, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_HE_OBSS_PD={0x24, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000001}, 0x8800) r7 = accept(r0, &(0x7f0000003f80)=@ieee802154, &(0x7f0000004000)=0x80) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f00000041c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004180)={&(0x7f00000040c0)={0x8c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "42bfeb55dc"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e51e32a0e2d968062e9a8b7605"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x20008081) [ 92.858650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.860229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.864221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.867942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.870412] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.872318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.988487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.998377] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.000881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.012666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.018716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.021757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.026338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.027637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.036324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.038458] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.038534] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.042809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.049612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.052068] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.053250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.054400] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.056575] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.058626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.061498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.061835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.064007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.071089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.073976] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.076333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.080062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.084698] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.095525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.112592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.116566] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.118615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.129117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.134281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.136367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.145504] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.147883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.150399] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.156578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.160212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.160398] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.162748] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.164821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.167173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.954019] Bluetooth: hci0: command tx timeout [ 95.144048] Bluetooth: hci1: command tx timeout [ 95.145470] Bluetooth: hci6: command tx timeout [ 95.208135] Bluetooth: hci5: command tx timeout [ 95.209843] Bluetooth: hci3: command tx timeout [ 95.210489] Bluetooth: hci2: command tx timeout [ 95.273307] Bluetooth: hci7: command tx timeout [ 95.274001] Bluetooth: hci4: command tx timeout [ 97.001086] Bluetooth: hci0: command tx timeout [ 97.193022] Bluetooth: hci6: command tx timeout [ 97.194532] Bluetooth: hci1: command tx timeout [ 97.256089] Bluetooth: hci3: command tx timeout [ 97.257479] Bluetooth: hci2: command tx timeout [ 97.258777] Bluetooth: hci5: command tx timeout [ 97.320206] Bluetooth: hci4: command tx timeout [ 97.321754] Bluetooth: hci7: command tx timeout [ 99.049004] Bluetooth: hci0: command tx timeout [ 99.241093] Bluetooth: hci6: command tx timeout [ 99.242678] Bluetooth: hci1: command tx timeout [ 99.305662] Bluetooth: hci3: command tx timeout [ 99.307225] Bluetooth: hci5: command tx timeout [ 99.308665] Bluetooth: hci2: command tx timeout [ 99.369566] Bluetooth: hci4: command tx timeout [ 99.371443] Bluetooth: hci7: command tx timeout [ 101.096962] Bluetooth: hci0: command tx timeout [ 101.289012] Bluetooth: hci6: command tx timeout [ 101.290464] Bluetooth: hci1: command tx timeout [ 101.352041] Bluetooth: hci5: command tx timeout [ 101.353456] Bluetooth: hci3: command tx timeout [ 101.354725] Bluetooth: hci2: command tx timeout [ 101.416008] Bluetooth: hci7: command tx timeout [ 101.417773] Bluetooth: hci4: command tx timeout [ 155.510852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.512357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.517479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.521307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.523041] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.524391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.566095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.570128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.577847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.583960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.588429] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.589667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.651467] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.656456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.659257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.667726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.669815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.672509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.682791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.685150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.698694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.703530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.707158] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.710336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.710420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.713073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.717139] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.718126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.721816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.722859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.786549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.794328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.794742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.795680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.796955] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.800155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.809200] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.828805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.832219] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.833117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.835024] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.835357] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.840177] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.840419] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.842361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.844201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.855144] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.856500] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.547036] Bluetooth: hci0: command tx timeout [ 157.608001] Bluetooth: hci1: command tx timeout [ 157.800157] Bluetooth: hci2: command tx timeout [ 157.802142] Bluetooth: hci4: command tx timeout [ 157.803220] Bluetooth: hci3: command tx timeout [ 157.865052] Bluetooth: hci5: command tx timeout [ 157.929953] Bluetooth: hci6: command tx timeout [ 157.930025] Bluetooth: hci7: command tx timeout [ 159.592629] Bluetooth: hci0: command tx timeout [ 159.656166] Bluetooth: hci1: command tx timeout [ 159.849946] Bluetooth: hci3: command tx timeout [ 159.849980] Bluetooth: hci2: command tx timeout [ 159.850444] Bluetooth: hci4: command tx timeout [ 159.912031] Bluetooth: hci5: command tx timeout [ 159.975967] Bluetooth: hci7: command tx timeout [ 159.976442] Bluetooth: hci6: command tx timeout [ 161.641046] Bluetooth: hci0: command tx timeout [ 161.703950] Bluetooth: hci1: command tx timeout [ 161.896061] Bluetooth: hci4: command tx timeout [ 161.896575] Bluetooth: hci2: command tx timeout [ 161.897192] Bluetooth: hci3: command tx timeout [ 161.960039] Bluetooth: hci5: command tx timeout [ 162.024042] Bluetooth: hci6: command tx timeout [ 162.024523] Bluetooth: hci7: command tx timeout [ 163.689673] Bluetooth: hci0: command tx timeout [ 163.752102] Bluetooth: hci1: command tx timeout [ 163.944016] Bluetooth: hci3: command tx timeout [ 163.944528] Bluetooth: hci2: command tx timeout [ 163.945696] Bluetooth: hci4: command tx timeout [ 164.008080] Bluetooth: hci5: command tx timeout [ 164.072053] Bluetooth: hci7: command tx timeout [ 164.072534] Bluetooth: hci6: command tx timeout [ 217.848840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.854132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.860106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.862788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.871789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.875182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.906625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.910143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.917106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.941819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.947637] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.951125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.994558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.996780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.998393] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.000863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.003015] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.004317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.101053] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.104310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.105798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.111400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.117228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.129351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.133115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.134474] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.138235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.159953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.168570] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.173078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.174905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.192146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.193239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.194540] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.197271] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.203194] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.206795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.211067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.218792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.231153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.234336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.250502] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.260111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.272019] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.295358] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.298136] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.300521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.309227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.944139] Bluetooth: hci0: command tx timeout [ 220.008025] Bluetooth: hci1: command tx timeout [ 220.072215] Bluetooth: hci2: command tx timeout [ 220.273992] Bluetooth: hci5: command tx timeout [ 220.275181] Bluetooth: hci4: command tx timeout [ 220.328177] Bluetooth: hci6: command tx timeout [ 220.329231] Bluetooth: hci3: command tx timeout [ 220.393019] Bluetooth: hci7: command tx timeout [ 221.993495] Bluetooth: hci0: command tx timeout [ 222.057154] Bluetooth: hci1: command tx timeout [ 222.122281] Bluetooth: hci2: command tx timeout [ 222.313132] Bluetooth: hci5: command tx timeout [ 222.313652] Bluetooth: hci4: command tx timeout [ 222.378033] Bluetooth: hci6: command tx timeout [ 222.379105] Bluetooth: hci3: command tx timeout [ 222.445926] Bluetooth: hci7: command tx timeout [ 224.041040] Bluetooth: hci0: command tx timeout [ 224.105069] Bluetooth: hci1: command tx timeout [ 224.169049] Bluetooth: hci2: command tx timeout [ 224.361968] Bluetooth: hci4: command tx timeout [ 224.362486] Bluetooth: hci5: command tx timeout [ 224.424984] Bluetooth: hci3: command tx timeout [ 224.425508] Bluetooth: hci6: command tx timeout [ 224.488974] Bluetooth: hci7: command tx timeout [ 226.088203] Bluetooth: hci0: command tx timeout [ 226.153069] Bluetooth: hci1: command tx timeout [ 226.217191] Bluetooth: hci2: command tx timeout [ 226.408979] Bluetooth: hci5: command tx timeout [ 226.409499] Bluetooth: hci4: command tx timeout [ 226.473078] Bluetooth: hci6: command tx timeout [ 226.473600] Bluetooth: hci3: command tx timeout [ 226.537231] Bluetooth: hci7: command tx timeout [ 280.123087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.125648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.131620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.136383] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.139302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.142674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.245002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.249925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.252230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.255836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.266431] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.268746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.304498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.311732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.314510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.324798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.331082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.333319] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.376142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.386167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.396071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.409094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.412792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.415115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.451747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.466985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.476339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.500115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.507082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.517213] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.521571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.529949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.530813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.533524] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.534779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.543277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.544804] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.546452] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.555269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.555332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.562014] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.563214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.573440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.576239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.577318] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.604100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.613560] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.630103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.151987] Bluetooth: hci0: command tx timeout [ 282.344997] Bluetooth: hci1: command tx timeout [ 282.408036] Bluetooth: hci2: command tx timeout [ 282.471999] Bluetooth: hci3: command tx timeout [ 282.665144] Bluetooth: hci6: command tx timeout [ 282.665378] Bluetooth: hci4: command tx timeout [ 282.727995] Bluetooth: hci5: command tx timeout [ 282.792103] Bluetooth: hci7: command tx timeout [ 284.200020] Bluetooth: hci0: command tx timeout [ 284.392011] Bluetooth: hci1: command tx timeout [ 284.457008] Bluetooth: hci2: command tx timeout [ 284.519964] Bluetooth: hci3: command tx timeout [ 284.712069] Bluetooth: hci6: command tx timeout [ 284.713062] Bluetooth: hci4: command tx timeout [ 284.776008] Bluetooth: hci5: command tx timeout [ 284.840908] Bluetooth: hci7: command tx timeout [ 286.249090] Bluetooth: hci0: command tx timeout [ 286.441042] Bluetooth: hci1: command tx timeout [ 286.504963] Bluetooth: hci2: command tx timeout [ 286.569317] Bluetooth: hci3: command tx timeout [ 286.761028] Bluetooth: hci4: command tx timeout [ 286.761356] Bluetooth: hci6: command tx timeout [ 286.824608] Bluetooth: hci5: command tx timeout [ 286.889018] Bluetooth: hci7: command tx timeout [ 288.296899] Bluetooth: hci0: command tx timeout [ 288.488982] Bluetooth: hci1: command tx timeout [ 288.555040] Bluetooth: hci2: command tx timeout [ 288.617141] Bluetooth: hci3: command tx timeout [ 288.807971] Bluetooth: hci6: command tx timeout [ 288.810935] Bluetooth: hci4: command tx timeout [ 288.872083] Bluetooth: hci5: command tx timeout [ 288.935989] Bluetooth: hci7: command tx timeout [ 342.656707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.658271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.659477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.663479] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.665278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.666340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.784823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.789221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.791787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.795521] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.798058] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.800117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.971006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.976093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.979074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.989200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.991194] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.992911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.116239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.119177] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.122487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.125123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.128289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.130531] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.131953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.136140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.159357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.173607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.185444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.186215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.187495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.191151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.192700] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.196939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.199065] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.201206] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.202092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.217105] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.222917] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.255143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.262637] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.266412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.315338] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.330168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.342121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.355207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.357686] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.362756] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.743933] Bluetooth: hci0: command tx timeout [ 344.872021] Bluetooth: hci1: command tx timeout [ 345.064902] Bluetooth: hci2: command tx timeout [ 345.192938] Bluetooth: hci3: command tx timeout [ 345.320030] Bluetooth: hci4: command tx timeout [ 345.321131] Bluetooth: hci5: command tx timeout [ 345.384908] Bluetooth: hci6: command tx timeout [ 345.449120] Bluetooth: hci7: command tx timeout [ 346.792933] Bluetooth: hci0: command tx timeout [ 346.920925] Bluetooth: hci1: command tx timeout [ 347.112978] Bluetooth: hci2: command tx timeout [ 347.240929] Bluetooth: hci3: command tx timeout [ 347.368097] Bluetooth: hci5: command tx timeout [ 347.368617] Bluetooth: hci4: command tx timeout [ 347.434099] Bluetooth: hci6: command tx timeout [ 347.495998] Bluetooth: hci7: command tx timeout [ 348.839928] Bluetooth: hci0: command tx timeout [ 348.968925] Bluetooth: hci1: command tx timeout [ 349.160109] Bluetooth: hci2: command tx timeout [ 349.288952] Bluetooth: hci3: command tx timeout [ 349.416895] Bluetooth: hci5: command tx timeout [ 349.417401] Bluetooth: hci4: command tx timeout [ 349.481086] Bluetooth: hci6: command tx timeout [ 349.545024] Bluetooth: hci7: command tx timeout [ 350.890072] Bluetooth: hci0: command tx timeout [ 351.017876] Bluetooth: hci1: command tx timeout [ 351.209440] Bluetooth: hci2: command tx timeout [ 351.336764] Bluetooth: hci3: command tx timeout [ 351.463972] Bluetooth: hci4: command tx timeout [ 351.464522] Bluetooth: hci5: command tx timeout [ 351.530118] Bluetooth: hci6: command tx timeout [ 351.592945] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:14:49 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802ee108a8 RCX=ffffffff817926f2 RDX=ffff88803470b700 RSI=0000000000000001 RDI=0000000000000000 RBP=00007f0f7db16000 RSP=ffff88802ab9f688 R8 =0000000000000000 R9 =fffff94000161dbe R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=00007f0f7db15000 R15=ffff88802ab9fad0 RIP=ffffffff81517f50 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1c14c86270 CR3=000000002bc3a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86bee0fb RBX=0000000000000001 RCX=ffffffff86bee0f6 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff888035fff620 RSP=ffff888035fff558 R8 =ffffffff86bee0fa R9 =ffff888035fff608 R10=000000000003c001 R11=00000000000c2f81 R12=ffff888035fff628 R13=ffff888035fff610 R14=ffff888035fff609 R15=ffff888035fff5c8 RIP=ffffffff81149385 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f40edc58260 CR3=0000000027bf0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000