Warning: Permanently added '[localhost]:25403' (ECDSA) to the list of known hosts.
2025/06/27 12:16:07 fuzzer started
2025/06/27 12:16:08 dialing manager at localhost:45637
syzkaller login: [  105.411129] cgroup: Unknown subsys name 'net'
[  105.548622] cgroup: Unknown subsys name 'cpuset'
[  105.600451] cgroup: Unknown subsys name 'rlimit'
2025/06/27 12:16:30 syscalls: 223
2025/06/27 12:16:30 code coverage: enabled
2025/06/27 12:16:30 comparison tracing: enabled
2025/06/27 12:16:30 extra coverage: enabled
2025/06/27 12:16:30 setuid sandbox: enabled
2025/06/27 12:16:30 namespace sandbox: enabled
2025/06/27 12:16:30 Android sandbox: enabled
2025/06/27 12:16:30 fault injection: enabled
2025/06/27 12:16:30 leak checking: enabled
2025/06/27 12:16:30 net packet injection: enabled
2025/06/27 12:16:30 net device setup: enabled
2025/06/27 12:16:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/27 12:16:30 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/27 12:16:30 USB emulation: enabled
2025/06/27 12:16:30 hci packet injection: enabled
2025/06/27 12:16:30 wifi device emulation: enabled
2025/06/27 12:16:30 802.15.4 emulation: enabled
2025/06/27 12:16:30 fetching corpus: 0, signal 0/0 (executing program)
2025/06/27 12:16:32 starting 8 fuzzer processes
12:16:32 executing program 0:
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ff9000/0x1000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xc6, 0xac, "18238309c2eea7bef9e4484135f4ed1819d7f1c9dd1edc4bad55e3017137f4af5401653db22e5eab5c8850ff9530ec3ccf0fece8b09a46f7938dfe7d94d12e9d53914996553136aadce08990cfb8946a935900dc5547fcdbc45d830ca6e404b6be79d61c33d8d48cb8d7951c2402792bc77c148c311e5bdb27f7cb36b380f8d1e99f318dc5429a8ca92ad48d430cf5c2507939c0f6587d430ae710ff7fc6b32cab07096a64adf63c6721b3066bd5c069a7bcede4030e10af5a5c444bff07756a830b"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004}, 0x5)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x249}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xb55}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
getitimer(0x0, &(0x7f0000000300))
get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x8, &(0x7f0000ffc000/0x2000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffa000/0x2000)=nil)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, 0xfffffffffffffffc, 0x4000001)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x638bf89f43bc6055, 0x12, 0xffffffffffffffff, 0x8000000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd8a, 0x28}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xa000)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x280000, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000640)={0x0, @initdev, @dev}, &(0x7f0000000680)=0xc)
shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil)
sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)

12:16:32 executing program 1:
get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x1)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
shmget(0x1, 0x1000, 0x1100, &(0x7f0000ffe000/0x1000)=nil)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0xd35)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/95, 0x5f, 0x0, &(0x7f0000000140)=""/140, 0x8c}, &(0x7f0000000240)=0x40)
mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000280)=""/106)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000340), 0x2, 0x0)
r1 = socket(0x1d, 0x5, 0x6)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r2, 0x14, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x54880}, 0x20000000)
get_mempolicy(&(0x7f0000000980), &(0x7f00000009c0), 0x4, &(0x7f0000ffe000/0x1000)=nil, 0x2)
exit_group(0x2)
r4 = socket$inet(0x2, 0x6, 0x5)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@private1, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000bc0)=0xe8)
r5 = openat$cgroup_subtree(r0, &(0x7f0000000c00), 0x2, 0x0)
mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000c40)=""/51)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x401, 0x8, 0x1, {0x0, 0x0, r5}}, 0xebd)

12:16:32 executing program 2:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x4, 0x2, 0x5}}, 0x14)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc8, 0xc0}}}, 0x7)
r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x9, 0x1)
write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7)
write$P9_RWRITE(r1, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x1f}, 0xb)
pipe2$9p(&(0x7f0000000180), 0x80000)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x50200)
mmap$IORING_OFF_CQ_RING(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1000000, 0x80010, r2, 0x8000000)
mmap$IORING_OFF_SQES(&(0x7f0000918000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x10000000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x4000)
r3 = syz_open_dev$vcsu(&(0x7f0000000240), 0x3, 0x208000)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xcba2, 0x39}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6a2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x20, 0x13, [{0x12}, {0x36, 0x1}, {0x1b}, {0x24, 0x1}, {0x3, 0x1}, {0x36}, {0x12}, {0x3}, {0x3}, {0x9}, {0x9, 0x1}, {0x36}, {0x36, 0x1}, {0x3, 0x1}, {0x48, 0x1}, {0x9}, {0x9}, {0x6}, {0x4}, {0x1b}, {0xc}, {0x30, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x60}, {0x1, 0x1}, {}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r4 = perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xff, 0x40, 0x9, 0x2, 0x0, 0x100000, 0x20261, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x1e009, 0x8d, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0x80, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0xd, r1, 0x0)
perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x1f, 0x6, 0x2, 0x0, 0x0, 0x200, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x232a, 0x1, @perf_bp={&(0x7f00000003c0), 0xa}, 0x4, 0x800000000000000, 0x10001, 0x7, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0x2}, 0x0, 0x6, r4, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RWRITE(r3, &(0x7f0000000540)={0xb, 0x77, 0x2, 0x9}, 0xb)
read$char_usb(r3, &(0x7f0000000580)=""/103, 0x67)

[  129.037384] audit: type=1400 audit(1751026592.356:7): avc:  denied  { execmem } for  pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:16:32 executing program 4:
semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=""/48)
r0 = semget$private(0x0, 0x0, 0x0)
semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000040)=""/232)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/4096)
r1 = getuid()
getgroups(0x9, &(0x7f0000001140)=[0xee00, 0xee00, 0xee00, 0xee00, 0xee01, <r2=>0x0, 0xee01, 0xee01, 0xee00])
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001180)={{0x1, r1, r2, 0xffffffffffffffff, 0xee01, 0x80, 0x8}, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2})
r3 = semget$private(0x0, 0x3, 0x94)
semctl$SEM_STAT_ANY(r3, 0x2, 0x14, &(0x7f0000001200)=""/46)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, 0x0, 0x60d, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x49}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x42}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001380))
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc0}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = accept4(r4, 0x0, &(0x7f0000001500), 0x800)
semctl$GETPID(r3, 0x3, 0xb, &(0x7f0000001540)=""/197)
syz_genetlink_get_family_id$gtp(&(0x7f0000001640), r5)
add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000001700)='./file0\x00', 0x900001b0)
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000001740)={0x0, @tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x2}}, @vsock={0x28, 0x0, 0x2710, @hyper}, @ax25={0x3, @default, 0x8}, 0x101, 0x0, 0x0, 0x0, 0x89d, 0x0, 0xb, 0x1, 0x8000})
semctl$IPC_RMID(0x0, 0x0, 0x0)

12:16:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000080)={0x1408, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_TESTDATA={0xe3, 0x45, "7f8571539dfaaa4fe53195aa312e083839fa0bb77ed37fd311bb5828578812ea2de6e0d58921484be13e528521063262a1cde7557251f01665d63ae799c89d7d15cb2850f67647bb3c7f2e4fa1efbdb25bbe04fead279fab0ac4a2858f2384d9f463eb8d3f6035984dc3d88ebd62ec9704b5e1abdbfa52498d5a628ffda78354f6a5ccfda430d9308f839bc149e5515235e1d505baf86fc550b442e4751b6577d6276ca545ccd38ef2b82da644edc4807abea475d3af39f4686df2fd08dbd0f37def5f7a826a0bdf43a5c37306c2a62cafd0ba10e8a502b327ce5550a10f02"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "9e6a607b93b38c972c314855b349608f98a38366f5c2a9353689cdf025e3782e2e29000f4bc6caadea65532936ae3df4f2272ea11da15934c2207b4c6900101e421ed5b64c30e5334504158ef3199ab99852265ccb4faa68009eea49d955ef3e56b1d869c2c17885bb578e96dbcf16128ba0accfd702aff84f2cfb843afc53bdfd5ba10933b356a6d4db7ea04d60458072ec0bb7e141d7997eb03aee2322afa7b635d4f29a6e7662e3de7523780794ae1485b3fbe29084eeef33b5f205a507912368bac9e33b783d59ef558f0e744530a4120e4c3f7b0d3c3580fb32a77ac8246d9d12e95f7becfcc181e348466b902b9430431ed4cc448e46a44c20a11c05aac9491af736cdd8dd4d8fae5783c9324ebb6f59b28fc1839b764ff4cf6f59c526a756e323def9902e3e851ae9f2f4480510eed43f4ad9b00adba1108854c2438802fb8bd5bc94dfc282c0801bc09134185ea36a259edcee22d641d5a629620b7b512db29408ec60624523d17b82792665a1d76002d0e11a394f9ad613082e6d11bddb85de658133de018866f590f17a273cd16c5c625c0adfb9bf08648023ea66c9bece490a6762ddcce05108d578940197cd9aaa2c82073e0060f3414cc9fd0af5d0c13329313274aba28f74f704522e30ce727f6c68cb9cc232e3b97b9bb3a6653c60d225ce397029cd85b1135356c277b62b6c4bef79937f167889154410c004c5c0c7ba951629df98da2ef5a6d6fd1a8f9acf3a1b42f442c466d6c3290ffe22496112e036067060f7c9b273e52d745f9bbe5015db016cff320309486d77b311f0317a02bedf73b10851e04364abe88bb6225a2a0d35efc44a7bcd989b02d382be1efdd92b741b531e9689ef8af1a31ed593a856b12197ec1213f65ffaa7548ea2e6abc89a8e059ea2c40dc145226038ec7da37fbeb6f6fe7cd4d0f6a010bc451288b98d479050e3ce4efc7d1adc82b9ef1a9999b4d0637cb7292a5dc5b6ebb370375d6ca507c2958ff6cf1163dc89aba29f9835d92a81a1a726c9714ac15089d2d8a632c20f9f7840d33119c01c259371f44113fc67b72063bba8d3c3fa0cf84ba9c6dbc2515d72f439f190a9f22545b8c0a2583e83065c958be0d3fc37f966d4597d0bb3589ce39854744a0959b3103196a18eed723bf15c29702c3b099a1272851dcc02d7c2eee37a4a75d8980be3540e0547464c2517fe28f2fd480f7532a5ae592703ea837e73a2ff97caeabe43dc71aebe5cc6eb6a48ee06e3b5b099f901f972a1e7e05f1d06fc06eba700b84263e2318579a56aa6af2b18cf05ce255bc4c139375f8038b67e9894612ab86e60b03726967c696691b975775e88962eaf6c842385f91715864e32aca3842a58c31372073e87de575d6ca2fefd7e749a643180051a69b72b0a089cb6bbeb72fe21f62f3a023da2c85f80a553540327e6e461bafea876da3497716c902168c592da93f6d648e20052bd663686ba8eb3e7f507ebe9d48ab32ea8ec0a82e4262b68c8d854c6e6d64f1bcfc751cf10fdafbff07003bb6fc75d9c08760d3cc382fe81513edfd10d469657d9676c8f8e86999dd1a41cc99b5e702cbef22c1d98d3462904cd75e8746af72c47e5496528a6c80c08a4ef51e4c4cc26e233fa61eb102a1034b7520f4ea253e09120104473625b11a874dee4f064ec5672f78f6e7d7bee59db7e1eeb466d4e4583314c303064fe3b2d7fae10510a97bd8528436501502bb4044214dbd5a6910328994492a74bd9b9fba9bf3ba2cd8c7dfa2279644420deac86e1d400c3d05fb6a8ded89256cba8b810a9afbc81938d8696ad7c226e3185e0d6fffa54b278d956ebc19cca56d854780211f1627b50a596e1b43547e997185f89959f21c3fe0c54d5ceb57bcda676b43ba07e8688f576c75ba2f86a902d234230e4b216b7d77e7e00c41fe000be8ff6ccfa05ba935ea3094b1258fd3981abde55914774081e64cdc249d2ff1ad0cdacfe5e4a809bcd06dbc59b59936f825ad93d9e467d3f5700be820ba4269df5ab3d82b9d51f12256542c30c6a861d0c6e3f66b77a262b3c8904549aea8db78df020ff8ad745ee30f0cdb82531e4fa1a2341179e2d6d6d17f50205732e261ab2e925b6feb5b6c3b506ae0925a03039a7031c1ddddb44b44737332c253b496912463a70471b0c5f44081534407339bd0f3a086948d04638ebf91e3f0c25daab055f354c5a22804eca8e60a41e6d3f4e8131178c741930ea5aa7030284b333c55d317c900a9ab98a7a2a165c728471673fa498ab6ada81c42abdd54801f64d6eb71307a3ebe35b8c910b15ef6c554149c5506989c3d14e9d94b1606f8199138bed69a1e5417b1bffbb4d0cb9cccbb7254539958453243056ebe9d5a2166a69901e424a4a4059b6449df309358f4867a99b77fd7c618be265a87d3ea9309cf90cb6a93fe3838015849b6948f781b88260fdb6f5ee74724cafe65d38b2028b5a8bc3262be606f01131393ed83600d41a3744c21ddd080d0358179698ce1a6a149395b9ab90fcc2cba9a19ea92bbc94b8c4586c21b98e326179ad898c478170a49ebc4a688817592150d0a97e478271272bd7b964786136f726dfcdb7fae9b0148b273b2cc14cafbbfd76d7a1257be9f754a40ab75e640a5e8ae930d2f53405db3d10f8b5425a275c1451b15483c423657ef498e9069e3f96d466e8f7d78b36ab1a9e3d527a7a264c9e422a9215a5c982aaa34cf33685623e1a0b1023db6f48985d9cfa753603d9ad26ccb245779b81fb96b361722ffd57118dc21bf3cd55704826389144f7811b1e4108b1c951022ed57ab895ffd12af78833e8692b91c980d3532ea9b55338f40d1ab6c122d30b95fadde59d64c92d842f6932f8c1e4da277110e28144d7b2271f29be5959a438a0872001d520630a22ed0833a6f24415494b45b4786bab91d421926a7a42b178656bbec1fd6107b584c63946d2aef275a98bd914fc6f622d17f9ad2d8dd7dc9a19eabc8e43590a9d91640335a904c761c5530a9adf7afe797069a293ff6512696ec3ea771961fd12a060470e70f061a89fcf6add29e544281e8d6063c68d1644cb852d4bb5cac693aa10a746462c17c8d98ee0db20dcfdd13fecb944226d965fe0b0d80235a5df11849ed8e3a1fb466ee8f0b3aaba045e1358e3a399d80b5f2296ba0e76a21b07c9cfb8b3f369214bea16b9c3e3597b404c46f64481f522f85c80a6188cc42e0878694bf8038b64393e7526191f30e8a523e3c8cc5c3c2d502c42d00c87dffda663958dc8a6fd038a4131ac3ec941b8a3e320a689727b9d73fd97aa49fcaa67e01ede8408f0a32d443dd3f02fe5ede468f7c7b600781e09afc690e0d09c31d9787030701043c55cf146aead80753ad455cc683a06a1dfd5c05c1989ab76bc980931dbea172c1f46e6830e0d7f34e0a1795634f130f08db773d2cfcaa72342a1477a20456d2e1ac077c65957ac69787716764fa8867ee86ca800c02e33ea937f40082fc9d6e91718a19b3b1dc0d1b87700066d99ef893824bf6ad366e44c93c1a39ea92c498c91b09696ceb1584cc81d952d166efbdd867ec7146dc05d0fd79001a28b600254a4d19240f5de431301fb31e2258f17ab480300bb390bda7a9260e5fc35718be74f0982c17568099ecbd77fc182d7957a6f4e05b816ac64d4c813e39a6c548ff29d0c67f4d0ebd9f3b2fd9fd42bf83aca137638d937b0d6cd4ab611ec2630e9f83902e4d638a1c352e0098ca090592f6a9d699591ceceae55959edf77ba716dad9324ea0aa85f3e24e2682ade536e55926ed1bf4cefcdcf7c96e757fe1d6e38039f7f2d1c5ea9dea393a4cf5f74cd72fa05f75a91b115e6f0c28314a7db52dd3082b0cd6e53cac8126491f9b172d25cd54e2a82105e2595da33b58aa167b5a7607a99cd5f393d440e31d8e9c22c0a8f1019a7f4621bfcfd0e168fb1403dbdb5420a9d47a1a24d9c7eebd461408f44a525c13a3072f1cee178b8e10cb580fd73b9a68e71e8abecb5957ef0733de0d80b64f2af2c187b84dfacb9d2a14f7a35caff9cba391b72d990be50095f2a91b1d585159669e79be9779e21ba76091f24fcc62f4db5ad0050cf07b5efdaf5b5f38d25258a2f26a74528a34f876c222d58ff2c6d27abc73e0d98f00e3882ff1e43e3e84b072181b5f15ce88bc28608625b5ff8bfb20e923d1eb2bc61ffde1eb41de6560c4e46befd2f45107d0b15ffcf85103757f73d093e318b21c4174f7de1e2f3bc05430ce7f7fe4185ab6ec2d49b89fe7b1b35ad901edd5a757bac0cbe9297a53418ed6b9d2ae06186b0795309079938aad0906e4eb9c86575852d0600e9c43b9daeb39e07cfd6372ffd2cdd910a652ebd3d63d66c90b2a099efb9e8794e7087abde66f8454f90384956228f1d692a659d148946fbcad4d0a8c94f00b7bd7612507e64cea6dcd0e9674e51abeb8b94057956a8d75fc6dffc7999529d9b9837d045c92f08eeb9daca61679aeb0f6640dbdc2ea74ba58fb0e3f47bcf49eef9c3d36f7b72e0c173a3e16103f2d3ee53ae3681f4b2fcf16d8fe40ee62a97b2019c25726ff78c464214ecfd7372ec054f9e151f59f0257e5fc081261a0aaca559feefada1ec890cd8ec8621bfa38f09ee4f8f87e0ef4eb446362324edd54c1543f11b6d4ddb829d5ded5af15cd3aa292cca9b45b3460aca460984f42b7fd8c7d67a943ea12b222064a0b827f99ad5e252c6f5be4e7b21f1d298e89cc0f6dd4f63663a7de7c0743491258cd34f7a5a4f2ef6d10144abc63282939e6a2140e4bb28f93a7e4409ec62f7c7e2e7377a903d7472b81deec50571f3784ed43bb0923a3030b9c7b4871ac82ea757b55ba5081e990cf077d43b17b4db6f6f4952dbd8cce872a4cd8c5bc0c7296e5d9cc71c1ec324c4c26f29b58e529b0362326a631c659f28334c175e9a98dae42d06c95c34b7d7fd6354bf24a58c96121ba1ec4e67a1f8dcc33aa98917ccc38863d1ad872cd9fe592b5cd54cb3c71970dd955a41a2ae4dd237da8f027104a6a21faee774deae71a2e9da1f5b6dbfbc10aabbf03af15f471321a894fa0407f98b1a0100417fa84ce7b2eb35df356051efc17c3f4817b6c44683fa025a6319f0131d940a83cb79d962e256b395509212ec9a087f5c38ede7d42ae9efb048f013e31a4ee37449ec5461a30b0fb357a62a5c3d68143e7b7902b01066d08cccd5472ba84c0119419ca05eeef72b8af3aa7ace41476e431f578f20b7ceddcd80664514b9c56ce1f942f64d0fb957d2568a9bf91726ecc7d3db3a361540d3f85b6a23846ab083154ea7faa5a28af4eebd6077d75ec65966f8cdefa7432d84c8135f666174833cd85dcee1d3b9f2e2f52ea77da77cdea0f676269cd1c8a7ceb50e266bfbd2e0872d2ff65c84532c8d8bf4de938bb106d97f27df4b971458d2aca1b0d4a80d1e2edc4041fd5c327b99b97863c87ab2340cade6d8a73b9453d7bfeb0d4dd810801fcf52060554cd64ea500fa95013380b6956990e6af4cf2f313532ad806cddf6db2a8665b88219de2ff97b8ff997d846cebc3c2066e99f443631d3bc46e2833603e921ce40f76e5ee2f17e9f6e30c76943df68a503dadbd5b79fbe85d007a191c1c9934e4d6021fc7aa4ff03fae37eda05509d213b30cc54c244344d517ee14ea17c05474ef2530306d96a4fe37159a66116507ed8b46c56110fb6ec08cf8cba6b618592d9e01e17689b7deeced6abc65f14a4454086a1454da2bc5716da4343fbbeba9aea5f41f25c5c08aa29cd2d3c44a3"}, @NL80211_ATTR_TESTDATA={0x6e, 0x45, "8b2724cfc3c0917a630d36feddaeecd47c783838c3ef49f96c967e391dc197dc04b0853cec2c4b5fbc3886e532d29769a08b86057e2a6d6ac1c27da0d83d2f5c665c55b64c6fc21f8047050ab153cfef8b9ff5efbe2b28ce31cd8acd78d92aadd83401741a1499d9874d"}, @NL80211_ATTR_TESTDATA={0xd9, 0x45, "236b9225ab075fc37f1ba0e614c4f271b9450b6fb28cc4d1ec0e584108e5308e6b0832d1716a0f21edfab67a22784a11adc39512e71532624f4f3cf283de3bdc071aea5faa8ee7f58d1cf607f75f592490d3afb17b8bbe5bbfa3b2f0ddc6ac98e105b931ba4a16fbfd8bb914b291aefce4e902c202889c17a858569a93503ff918a42c58512d00300bce9af4d000a015ebb8c72b2f947eb152934b8d75c11ac55848879ba62286eae15bda26a520db709d8fd79f9a377286d2c964600cd7b379d2325802e3680bec56325f23b7fb79661eafb1f200"}, @NL80211_ATTR_TESTDATA={0xbc, 0x45, "da242c6abce85a3be841fe769b9ea72751a2c6aca29b2d4fc997cb4956aa720e8729ab54c3675198c9efcd48a5866e260bc49c6cac940f79dffdbc887f92d222a63ae228dcc2c9ef5b83eb972e28861dc336d81562c49eb6b23d4e61eb4c735f6efc3c56790a28528faac05b011f8c70a3db2223720edad631422ec5ebdfaeea36ff66be3c160e721de142f4013a2848b5cbb89c6437a08a89385cdbd8c491d90674d48d29a0e4ecfda68162a268467a92cb5fa4023d4df2"}, @NL80211_ATTR_TESTDATA={0xb0, 0x45, "1015e9e72403a6ee5508aa9d893adfc7a3112342e2182cd40f35906a33dcf24c66eeb406c437440c1a7ea67546fed19b760fa5e6ae1d011c8f896edc27ac06ab10cc4a83f8edd6c32759dbbf2e8c4f982cc1d76af596f5e30c29fea9d279d9a8d5a504ff8e9a291ad46612b9e1c5b5ec29ab2c49c1875974ec8d84f53b2c04de0d5359de5c050c381b14f7096b274a420f72fbe46a3e8f39177f3cca450a18752e91ce1706c8a101b98d74de"}, @NL80211_ATTR_TESTDATA={0x45, 0x45, "d74827ea2fae0b9d6da34399e34f831578bbb0f846dea0008238a1f144067f94fffaf1d77781217d25a9a514e10f926a519bfc47076c6971fbf4487ec9d27a0bfc"}]}, 0x1408}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0x100, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xbf}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x43fb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f27557c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x35871aa97da8e25b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x41)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0xa0, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4c}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="2e864c16c5cd42d464f8ecfdd2548cbe430a331473a993b31a897f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffe0}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3f, 0xd806, 0x9, 0x514c, 0x3, 0x1, 0x5, 0x2, 0x101, 0x6, 0x0, 0x1, 0xd7cb, 0x100, 0x400, 0x92eb]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x20004001)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x8844)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7fff}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001d00)={&(0x7f0000001b00), 0xc, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x14c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xae4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2b8c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffc1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xef0}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4def}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb28}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
r3 = socket(0x1f, 0x3, 0x2)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000)
r4 = socket$inet6(0xa, 0x1, 0x2)
getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000001e40)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000001e80)=0x14)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1e1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffe01}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]]}, 0x68}, 0x1, 0x0, 0x0, 0x4000840}, 0x80)
getpeername(0xffffffffffffffff, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000002080)=0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r0)
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x30, r6, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc048050}, 0x2000000)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1f, 0x1fe0000, @l2={'ib', 0x3a, 'vlan1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8005)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0x94, r6, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "332862279ce3a4e85d4904b02f"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "a0e9e5c762"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "7f4b62fd04c76d9a3b128601"}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dadf25b685"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "714060a521"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000002d00)={&(0x7f00000024c0)={0x840, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_PMSR_ATTR_PEERS={0x820, 0x5, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb522}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}]}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x321e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4da2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1706}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xad}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x203}]}]}, {0x3d0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x240, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf74d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x36}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3eed}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}]}]}]}, 0x840}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4)

12:16:32 executing program 5:
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040810)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r2 = syz_open_dev$vcsu(&(0x7f0000000400), 0x4, 0x42000)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4)
getuid()
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r2)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x240000b0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x2000, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x10)
getuid()
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x810)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x9)
r4 = accept4(r2, 0x0, &(0x7f0000000a80), 0x800)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x97}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffc01}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)

12:16:32 executing program 6:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}]}, 0x54}}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x100, 0x25}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x53}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x81, 0x6d}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}, @NL80211_ATTR_SSID={0x21, 0x34, @random="2628992638dd5aebfc4d79d6ae00906ac94aae34dc5fe25dd979f2b7b8"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1b8, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x8, 0x3, "10853dfaf54920b9546eb4d6565c2d35", "cde925e58b3024b7bdfb93d6160645b966230e45b8f2b050221ae48b9f9d3053", "ae31d6028df7bc8335a4205b17bf4ca014c3856b23a49eb0ba8965a6ec6eb431", [{0x2, 0x21, "024c5ad98d6ae28d9c2ee8f0664c46829070564435c59bfb4f3a4f334df415eb8b"}, {0x1, 0x18, "c3c3759fd5722a8db33ea0fa3fe357f15a0f92ff92057018"}, {0x2, 0x4, "3a1fd52f"}]}}, @dsss={0x3, 0x1, 0xb2}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @perr={0x84, 0x115, {0x23, 0x11, [@not_ext={{}, @device_a, 0x2, "", 0x1a}, @ext={{}, @broadcast, 0x8, @broadcast, 0x8}, @ext={{}, @broadcast, 0xffffffff, @device_b, 0x32}, @not_ext={{}, @device_a, 0x6, "", 0x10}, @ext={{}, @device_b, 0x9, @device_b, 0x30}, @not_ext={{}, @device_a, 0x1, "", 0x1d}, @not_ext={{}, @device_a, 0x80000001, "", 0x13}, @not_ext={{}, @broadcast, 0x101, "", 0x14}, @not_ext={{}, @broadcast, 0x5}, @ext={{}, @device_b, 0x25, @device_a, 0x12}, @ext={{}, @device_b, 0x10000, @broadcast, 0x11}, @not_ext={{}, @device_b, 0x3, "", 0x12}, @ext={{}, @device_a, 0x9, @broadcast, 0xb}, @ext={{}, @device_a, 0x4, @device_b, 0x7}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @ext={{}, @device_b, 0x4, @broadcast, 0x2b}, @ext={{}, @device_a, 0x7, @device_a, 0x33}]}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x2004c810}, 0x2000000)
r2 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x100000000, 0x38000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={<r3=>0x0, @multicast1, @broadcast}, &(0x7f0000000700)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={0x0, @can, @xdp={0x2c, 0x1, r3, 0x22}, @xdp={0x2c, 0xf, r4, 0x3d}, 0x7, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000780)='ip_vti0\x00', 0x3, 0xde, 0x2d6})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffff000, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x24008000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4004011)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000ac0)={0x7, [0x0, 0x3], 0x9e}, 0x10)
write$bt_hci(r2, &(0x7f0000000b00)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x2b}}}, 0x5)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x98, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xe, 0x4, "92f2f030a12dd782d73c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "377a44f249b13d2ec0631033e7"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000dc0}, 0x4004090)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r2)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r7, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000081}, 0x4008004)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000e40)={@local, <r8=>0x0}, &(0x7f0000000e80)=0x14)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x4000)

12:16:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x30040000)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x32}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x40)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x35}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000940)=0xe8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x788}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x280008c0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@dev, @in=@dev}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000b80)=0xe8)
membarrier(0x10, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000d40), 0x1, 0x181000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0)
sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x47}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x81}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x80)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f00), 0x200, 0x0)
timerfd_gettime(r5, &(0x7f0000000f40))
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000f80)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000001080)=0xe8)
r7 = accept4(r3, &(0x7f00000010c0)=@qipcrtr, &(0x7f0000001140)=0x80, 0x800)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x4c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x24088801)

[  130.555939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.557301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.561670] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.563875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.565995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.570928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.572359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.572599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.575807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.577301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.577817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.593115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.595060] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.597039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.604660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.641768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.648430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.648931] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  130.653091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.659104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.660415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.664815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  130.666214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.670124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  130.685937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.687875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.695836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.696838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  130.706910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.709317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.722914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.724946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  130.726021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.735097] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  130.748433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  130.769935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  130.774853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  130.776863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  130.796355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.813986] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  132.656384] Bluetooth: hci2: command tx timeout
[  132.657417] Bluetooth: hci0: command tx timeout
[  132.721647] Bluetooth: hci3: command tx timeout
[  132.848536] Bluetooth: hci5: command tx timeout
[  132.849191] Bluetooth: hci1: command tx timeout
[  132.850142] Bluetooth: hci7: command tx timeout
[  132.850749] Bluetooth: hci4: command tx timeout
[  132.851299] Bluetooth: hci6: command tx timeout
[  134.709157] Bluetooth: hci0: command tx timeout
[  134.711031] Bluetooth: hci2: command tx timeout
[  134.768560] Bluetooth: hci3: command tx timeout
[  134.896564] Bluetooth: hci7: command tx timeout
[  134.898259] Bluetooth: hci4: command tx timeout
[  134.899803] Bluetooth: hci6: command tx timeout
[  134.901173] Bluetooth: hci5: command tx timeout
[  134.901229] Bluetooth: hci1: command tx timeout
[  136.753819] Bluetooth: hci0: command tx timeout
[  136.753836] Bluetooth: hci2: command tx timeout
[  136.817911] Bluetooth: hci3: command tx timeout
[  136.943713] Bluetooth: hci7: command tx timeout
[  136.945428] Bluetooth: hci1: command tx timeout
[  136.945694] Bluetooth: hci6: command tx timeout
[  136.947264] Bluetooth: hci5: command tx timeout
[  136.947311] Bluetooth: hci4: command tx timeout
[  138.800122] Bluetooth: hci0: command tx timeout
[  138.800228] Bluetooth: hci2: command tx timeout
[  138.866535] Bluetooth: hci3: command tx timeout
[  138.991613] Bluetooth: hci6: command tx timeout
[  138.993498] Bluetooth: hci1: command tx timeout
[  138.993593] Bluetooth: hci4: command tx timeout
[  138.993975] Bluetooth: hci5: command tx timeout
[  138.994398] Bluetooth: hci7: command tx timeout
[  193.544024] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.545981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.547730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.560429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.565286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.608840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.619092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.621447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.626663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.632563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.643410] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.662853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.676531] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.677726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.682304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.683296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.688024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.698356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.705905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.709166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.717907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.720112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.723183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.724783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  193.726971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  193.729248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.732774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  193.736898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  193.767987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  193.774956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  193.781627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  193.781811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  193.788662] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  193.801360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  193.803145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  193.821824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  193.825358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  193.839949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.843925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  193.850837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  195.631598] Bluetooth: hci0: command tx timeout
[  195.696547] Bluetooth: hci1: command tx timeout
[  195.824082] Bluetooth: hci2: command tx timeout
[  195.824114] Bluetooth: hci4: command tx timeout
[  195.825674] Bluetooth: hci3: command tx timeout
[  195.888060] Bluetooth: hci5: command tx timeout
[  195.889606] Bluetooth: hci6: command tx timeout
[  195.956058] Bluetooth: hci7: command tx timeout
[  197.679718] Bluetooth: hci0: command tx timeout
[  197.744728] Bluetooth: hci1: command tx timeout
[  197.872550] Bluetooth: hci4: command tx timeout
[  197.873053] Bluetooth: hci2: command tx timeout
[  197.873143] Bluetooth: hci3: command tx timeout
[  197.935602] Bluetooth: hci5: command tx timeout
[  197.936090] Bluetooth: hci6: command tx timeout
[  197.999966] Bluetooth: hci7: command tx timeout
[  199.728560] Bluetooth: hci0: command tx timeout
[  199.791699] Bluetooth: hci1: command tx timeout
[  199.919844] Bluetooth: hci4: command tx timeout
[  199.919945] Bluetooth: hci3: command tx timeout
[  199.920899] Bluetooth: hci2: command tx timeout
[  199.983916] Bluetooth: hci5: command tx timeout
[  199.985450] Bluetooth: hci6: command tx timeout
[  200.049420] Bluetooth: hci7: command tx timeout
[  201.775561] Bluetooth: hci0: command tx timeout
[  201.841695] Bluetooth: hci1: command tx timeout
[  201.967863] Bluetooth: hci2: command tx timeout
[  201.968003] Bluetooth: hci3: command tx timeout
[  201.969999] Bluetooth: hci4: command tx timeout
[  202.031983] Bluetooth: hci5: command tx timeout
[  202.031998] Bluetooth: hci6: command tx timeout
[  202.095560] Bluetooth: hci7: command tx timeout
[  256.134902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  256.136654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  256.138617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  256.150249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.152737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  256.162128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  256.166825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.168338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  256.173866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  256.178016] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  256.338609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  256.342121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.349132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.354835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.358934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.382532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  256.384989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  256.389439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  256.395849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  256.401196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.419057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  256.422797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  256.426796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  256.467761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  256.474015] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  256.488993] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  256.492889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  256.500223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  256.514663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  256.516324] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  256.518939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  256.521242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  256.523275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  256.528068] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  256.529263] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  256.530745] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  256.567975] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  256.626942] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  256.637015] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  256.789010] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.223916] Bluetooth: hci1: command tx timeout
[  258.289529] Bluetooth: hci0: command tx timeout
[  258.416125] Bluetooth: hci2: command tx timeout
[  258.416193] Bluetooth: hci3: command tx timeout
[  258.609660] Bluetooth: hci4: command tx timeout
[  258.737230] Bluetooth: hci5: command tx timeout
[  258.800323] Bluetooth: hci6: command tx timeout
[  258.993688] Bluetooth: hci7: command tx timeout
[  260.273608] Bluetooth: hci1: command tx timeout
[  260.337671] Bluetooth: hci0: command tx timeout
[  260.463565] Bluetooth: hci3: command tx timeout
[  260.463723] Bluetooth: hci2: command tx timeout
[  260.655584] Bluetooth: hci4: command tx timeout
[  260.784044] Bluetooth: hci5: command tx timeout
[  260.849623] Bluetooth: hci6: command tx timeout
[  261.039560] Bluetooth: hci7: command tx timeout
[  262.320526] Bluetooth: hci1: command tx timeout
[  262.383542] Bluetooth: hci0: command tx timeout
[  262.511564] Bluetooth: hci2: command tx timeout
[  262.511586] Bluetooth: hci3: command tx timeout
[  262.705522] Bluetooth: hci4: command tx timeout
[  262.831840] Bluetooth: hci5: command tx timeout
[  262.897026] Bluetooth: hci6: command tx timeout
[  263.087778] Bluetooth: hci7: command tx timeout
[  264.368624] Bluetooth: hci1: command tx timeout
[  264.433574] Bluetooth: hci0: command tx timeout
[  264.559606] Bluetooth: hci2: command tx timeout
[  264.559628] Bluetooth: hci3: command tx timeout
[  264.751622] Bluetooth: hci4: command tx timeout
[  264.879608] Bluetooth: hci5: command tx timeout
[  264.944423] Bluetooth: hci6: command tx timeout
[  265.135918] Bluetooth: hci7: command tx timeout
[  318.767007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.795348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.819012] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.829329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.833805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.918615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  318.949139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  318.953969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  318.961269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  318.963307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  319.111294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.116662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.119248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.139803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.145180] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.198122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  319.207935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  319.209127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.213832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.219825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  319.225986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.231918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.236827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  319.239639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  319.246655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  319.279245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  319.299056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  319.307788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  319.326269] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  319.341822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  319.346035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  319.361083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  319.370779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  319.380925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  319.381164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  319.384344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  319.399869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  319.408001] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  319.432108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  319.433007] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.007643] Bluetooth: hci0: command tx timeout
[  321.008739] Bluetooth: hci1: command tx timeout
[  321.200598] Bluetooth: hci2: command tx timeout
[  321.391691] Bluetooth: hci4: command tx timeout
[  321.392651] Bluetooth: hci3: command tx timeout
[  321.455658] Bluetooth: hci5: command tx timeout
[  321.519644] Bluetooth: hci6: command tx timeout
[  321.520254] Bluetooth: hci7: command tx timeout
[  323.055587] Bluetooth: hci0: command tx timeout
[  323.056132] Bluetooth: hci1: command tx timeout
[  323.249614] Bluetooth: hci2: command tx timeout
[  323.440792] Bluetooth: hci4: command tx timeout
[  323.441314] Bluetooth: hci3: command tx timeout
[  323.504745] Bluetooth: hci5: command tx timeout
[  323.569010] Bluetooth: hci6: command tx timeout
[  323.570400] Bluetooth: hci7: command tx timeout
[  325.103614] Bluetooth: hci0: command tx timeout
[  325.104165] Bluetooth: hci1: command tx timeout
[  325.296555] Bluetooth: hci2: command tx timeout
[  325.487613] Bluetooth: hci3: command tx timeout
[  325.488128] Bluetooth: hci4: command tx timeout
[  325.552591] Bluetooth: hci5: command tx timeout
[  325.616550] Bluetooth: hci7: command tx timeout
[  325.617036] Bluetooth: hci6: command tx timeout
[  327.152720] Bluetooth: hci0: command tx timeout
[  327.153278] Bluetooth: hci1: command tx timeout
[  327.346538] Bluetooth: hci2: command tx timeout
[  327.536577] Bluetooth: hci4: command tx timeout
[  327.537092] Bluetooth: hci3: command tx timeout
[  327.601802] Bluetooth: hci5: command tx timeout
[  327.663692] Bluetooth: hci6: command tx timeout
[  327.665084] Bluetooth: hci7: command tx timeout
[  381.455181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.457125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.459059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.463687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.465712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.705154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  381.707090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  381.709288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  381.719666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  381.722429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  381.825838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  381.828979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.832005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.840281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.844987] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  381.851807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  381.854939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  381.857382] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  381.866987] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  381.867113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  381.873691] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  381.874004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  381.884852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  381.887381] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  381.894213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  381.896275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.897416] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  381.911280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  381.920375] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  381.924917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  381.931888] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  381.940762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  381.944666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.950930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.973791] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.976700] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.008399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  382.015969] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  382.029112] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  382.035425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  383.536102] Bluetooth: hci0: command tx timeout
[  383.791722] Bluetooth: hci1: command tx timeout
[  384.047701] Bluetooth: hci4: command tx timeout
[  384.049002] Bluetooth: hci3: command tx timeout
[  384.049220] Bluetooth: hci6: command tx timeout
[  384.049620] Bluetooth: hci5: command tx timeout
[  384.111915] Bluetooth: hci7: command tx timeout
[  384.688205] Bluetooth: hci2: command tx timeout
[  385.583877] Bluetooth: hci0: command tx timeout
[  385.839755] Bluetooth: hci1: command tx timeout
[  386.095781] Bluetooth: hci6: command tx timeout
[  386.096689] Bluetooth: hci5: command tx timeout
[  386.097229] Bluetooth: hci3: command tx timeout
[  386.097788] Bluetooth: hci4: command tx timeout
[  386.159903] Bluetooth: hci7: command tx timeout
[  386.735971] Bluetooth: hci2: command tx timeout
[  387.631678] Bluetooth: hci0: command tx timeout
[  387.887650] Bluetooth: hci1: command tx timeout
[  388.143686] Bluetooth: hci4: command tx timeout
[  388.144220] Bluetooth: hci3: command tx timeout
[  388.144263] Bluetooth: hci5: command tx timeout
[  388.145246] Bluetooth: hci6: command tx timeout
[  388.208232] Bluetooth: hci7: command tx timeout
[  388.783815] Bluetooth: hci2: command tx timeout
[  389.679616] Bluetooth: hci0: command tx timeout
[  389.935601] Bluetooth: hci1: command tx timeout
[  390.191711] Bluetooth: hci5: command tx timeout
[  390.192268] Bluetooth: hci4: command tx timeout
[  390.193743] Bluetooth: hci3: command tx timeout
[  390.194228] Bluetooth: hci6: command tx timeout
[  390.256697] Bluetooth: hci7: command tx timeout
[  390.831767] Bluetooth: hci2: command tx timeout

VM DIAGNOSIS:
12:21:37  Registers:
info registers vcpu 0
RAX=0000000080000000 RBX=ffff8880090731f0 RCX=ffffffff81c889db RDX=ffff888017413700
RSI=ffffffff81b3dc4c RDI=0000000000000005 RBP=ffff88800902bbe8 RSP=ffff888028a37a28
R8 =0000000000000000 R9 =ffffed1001cd2369 R10=0000000000000000 R11=0000000000000001
R12=ffff88801642e940 R13=1ffff11005146f49 R14=00000000000001f8 R15=0000000000000001
RIP=ffffffff81738107 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55f6000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ce89f854c8 CR3=000000002db85000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2e7473696c6b63616c622d7665646266 XMM01=00666e6f632e7473696c6b63616c622d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88800d8a4c20 RBX=ffff88803531d500 RCX=ffffea0000362900 RDX=0000000000000000
RSI=ffff88800940f280 RDI=ffffffff81a77ab6 RBP=ffff88800940f280 RSP=ffff88802f9b7590
R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff86437a57 R11=0000000000000001
R12=0000000000000000 R13=ffff88802f9b75c8 R14=ffff888035318000 R15=ffff888035318000
RIP=ffffffff81aed818 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56f6000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5e2e451260 CR3=000000000b7e8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000