Warning: Permanently added '[localhost]:14568' (ECDSA) to the list of known hosts. 2025/07/07 18:36:16 fuzzer started 2025/07/07 18:36:17 dialing manager at localhost:42083 syzkaller login: [ 52.202515] cgroup: Unknown subsys name 'net' [ 52.281793] cgroup: Unknown subsys name 'cpuset' [ 52.310953] cgroup: Unknown subsys name 'rlimit' 2025/07/07 18:36:28 syscalls: 207 2025/07/07 18:36:28 code coverage: enabled 2025/07/07 18:36:28 comparison tracing: enabled 2025/07/07 18:36:28 extra coverage: enabled 2025/07/07 18:36:28 setuid sandbox: enabled 2025/07/07 18:36:28 namespace sandbox: enabled 2025/07/07 18:36:28 Android sandbox: enabled 2025/07/07 18:36:28 fault injection: enabled 2025/07/07 18:36:28 leak checking: enabled 2025/07/07 18:36:28 net packet injection: enabled 2025/07/07 18:36:28 net device setup: enabled 2025/07/07 18:36:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/07 18:36:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/07 18:36:28 USB emulation: enabled 2025/07/07 18:36:28 hci packet injection: enabled 2025/07/07 18:36:28 wifi device emulation: enabled 2025/07/07 18:36:28 802.15.4 emulation: enabled 2025/07/07 18:36:28 fetching corpus: 0, signal 0/0 (executing program) 2025/07/07 18:36:29 starting 8 fuzzer processes 18:36:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x48, 0x1, 0x101, 0x0, {{0x12, 0x4, 0x3, 0x2, 0x48, 0x67, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x24, 0xdb, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102, 0xfffffff8}, {@private=0xa010101, 0x5}, {@broadcast, 0x80000000}]}, @generic={0x88, 0xd, "cfb6f36112ffd9e7f3285e"}]}}}}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000001c0)={0x1, @time={0x10001, 0x81}, 0x1, {0x4, 0x9}, 0x0, 0x1, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000280)) socketpair(0x1a, 0x6, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000540)=0x1, 0x4) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000580)={0x3}) socketpair(0x9, 0x0, 0x7ff, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2001100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x38}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000024}, 0x20000001) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x40}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000800)={@private, @multicast1}, &(0x7f0000000840)=0xc) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x32}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc0ac}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004810}, 0x84) 18:36:29 executing program 2: r0 = syz_io_uring_complete(0x0) mq_notify(r0, &(0x7f0000000000)={0x0, 0xb}) r1 = syz_io_uring_setup(0xdbd, &(0x7f0000000040)={0x0, 0xcf2b, 0x2, 0x1, 0x234, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = socket$inet(0x2, 0x5, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000140)=@xdp={0x2c, 0x4, 0x0, 0x12}}, 0xff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000200)) socketpair(0x2c, 0x5, 0x1000, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x1, 0x10, 0x6, 0xf899, {{0x12, 0x4, 0x0, 0xa, 0x48, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, {[@generic={0x7, 0xb, "8d977f9170693a351c"}, @generic={0x82, 0x8, "e51746660ef7"}, @noop, @timestamp_prespec={0x44, 0x1c, 0xce, 0x3, 0x1, [{@broadcast, 0x2}, {@rand_addr=0x64010101, 0x7f}, {@empty, 0x1}]}, @end]}}}}}) syz_io_uring_setup(0x1646, &(0x7f0000000500)={0x0, 0x8d5a, 0x8, 0x2, 0x108, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x20000040) syz_io_uring_setup(0x6e11, &(0x7f0000000740)={0x0, 0x308b, 0x2, 0x0, 0x3c4, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800)=0x0) socketpair(0x27, 0x1, 0xfffff922, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r6, &(0x7f0000000980)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r7, 0x0, &(0x7f0000000880)="6e6ba525a21b21bb546ab118ad855d693b043a84f56f695328220893c8fab67d93a38ca33837e708ea2c4205f6875c070119ede5c43c746c68f5d7d7e1221ed1179e2f97973d742533c8b5e715f0551d58d8a187ae06e73b370ebe4024b451bd46fd4899781512ae22519c07443dbef9b21d30bf967abdb18d5fff5550a415bd4b0d3beeaee063bf74562f924bd8b42bf75c7c040ac670281b531bcc554cf99c6badf2a8670b0da730d22b9ab33f74fcae1a9a7d58dadfc890d836e2fab1ad4a3570fce7bb812690b1065c48cb7bcf919c116bfaceec5f1da8e7ae57d9e22cb472306e9e35d1b4328b4e044bfd15cbec2cde", 0xf2, 0x4000010, 0x1}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000009c0)={0x0, 0x1, r3, 0x7, 0x80000}) r8 = perf_event_open$cgroup(&(0x7f0000000a40)={0x0, 0x80, 0x8, 0x1f, 0x5, 0x3, 0x0, 0x8001, 0x59012, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000a00), 0xd}, 0x302, 0xb62da33, 0x20, 0x4, 0x8000, 0x101, 0x1f, 0x0, 0x7fff, 0x0, 0x3}, r0, 0xd, r0, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000ac0)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000cc0)={@remote, @loopback, 0x0, 0x2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, 0x18) 18:36:29 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000001c0)=0x2, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000200)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80500a48}, 0xc, &(0x7f00000013c0)={&(0x7f0000000440)={0xf58, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x27}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff7f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff4b73}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x400, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0xdb41, 0x1d4, 0x4, 0x7fff, 0x2, 0x6d65, 0x5, 0x76b]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x80, 0x3, 0xad9, 0x80]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x2c6, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40b2}, @device_a, @broadcast, @from_mac, {0x7, 0x7}}, 0x7, @default, 0x40, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0x99, 0xff}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x1, 0x0, {0x3, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0xc3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x3f, 0x2b}}, @void, [{0xdd, 0xcb, "08d1ec522ae6513857bb1d08ad3bd5151408a6d26455c39376a32697e9de062e339a91622aa4339263e80e1e282adecd88ff6bc4cfe4d6de66b296e91e6d3da5780b7df07cae8a5de9eec1b1ebf663c0070e987400e7259fd49eda047d0b470329ae3c59e983b4488772e9f0c42444e70a149480b94ac39b839027a4e2f8547c8ac572b4694ff8c8ff005d888b92c7b6e7f323ddd44da8de6a36b5c66a61e7eeaab65ee5bb7f03a84dd0fe1d1beb82ef3da3928e70cccee16db1247b13d18e375769e875848a4c2be83388"}, {0xdd, 0x7f, "cf4eaf6e0680f630b4ea13d5395b4740c3a95e8d34c68dad4a8027f65bf77521532aeb8782f4196d812ceed5392b7a1b1a9dc895cb71713a8fb667b7acbbe34774900017386563be5a4abc94f6ba9244371ce05135fcd24b35c0922a58944ca547d7c495558fef478a41b6c5b5a87c903728b3b9c342c2c44285e621e2422d"}, {0xdd, 0x1b, "5da63856bb6398bae4da7a1b2ec910df45af3f21d323f77de5deaa"}, {0xdd, 0xb, "028dcf10289e54ae9c0bfe"}, {0xdd, 0xb9, "daff5f7cf0126b6ece1db9db77431455e50e4efce694ab435d913d42545faeeafec3fa47e3f6356bd5631ad31e8b4a4ce60af9207be8420542cda19c856a196c008a6d75681c42fa3a3bd8df47ed144aa92445461ef9b011bb9729597bf1a93fc313e054b1fcf232eac4ee6390cf66b13ca793894248046f610deb6dee63a9f2f71d4a59f437209ad995cc0133313769b5deba620017c399c9ee46035bfb5f0e93b79b602baa3cb2e7daf7a3d99fafb7cfce540208860ae5c7"}, {0xdd, 0x28, "3f8d01d72b6b249f9e8ee41090104bb03fab2a75a5370b0759ec567b936ad405e2c878f5a3006b54"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xee, 0x7f, [@supported_rates={0x1, 0x1, [{0x9, 0x1}]}, @random={0x0, 0xe5, "684c4a362861725243884000f30d7c09f9b8cde77b5bd63a52a5fc1f8e0d2c33c323b4c708638527f2e7ee2731161099e0628301567c6a3653fb03ee72f98fc7572d0d23ceb8412b89f615280f6f5bde904471778afd9cfb44fed75b6f6f92f642fea0d00b90ad1960b4602959d97934d28ac9c848d4dac78092a259994695d11323953e40a02dc0ef64b6383eed81c5dd790c87fc86c59066a8773ab257ac4a3b431511cbe88d4824151a2f37e358f6d062064acf322b32e29bc50a7813faf7f89277b2903c4d98931208e1a99b8477f87f960f262083fd7e123c398579d6a590bfd5d49c"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x4, 0x9, 0x1, 0x2, 0x7fff, 0xf1d2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x2, 0x2, 0x2, 0x5, 0x3, 0x9, 0x8001]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xad4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x155, 0x7f, [@gcr_ga={0xbd, 0x6}, @prep={0x83, 0x25, @ext={{}, 0x34, 0x0, @device_b, 0xffff, @device_b, 0x80000000, 0xffffffff, @device_a, 0xe8b}}, @chsw_timing={0x68, 0x4, {0x401, 0x7ff}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@random="e3927bdc0c43", @device_a, @device_b}}, @dsss={0x3, 0x1, 0x6c}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x54, 0x5, @device_b, 0x101, 0x3, 0x40}}, @mesh_chsw={0x76, 0x6, {0x2, 0x1f, 0x14, 0x8001}}, @random_vendor={0xdd, 0xdc, "528d7b9443d88b4746ba5d934b136f6bbce28b834b22d5ec60be27b5fc267b361d9d1713d878bd17a8d59636183a31f834258c43c09127458003b0dca95e96d69a50cb2e5d4fc29db08e8171e57e09a2f01e5b31a5383a6df6ba3103d39a0dacb966f35bb164275b66a4f74e277b18d6e5d4894241162ab5333a14d410b999f543b0eb202d90e33fa64a9b1e1926f52203fa38eeabd63dbd612fbe10161d685bccb7889bb95804eae9dec6f29ac628cb9aa1a5da7bce282929b493ab2e89d8ba73abeaa9e93012ca68ad2f66a3b910abfe36eac5c1c27972403ac5ff"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x14, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x6, {0x1, 0x8000, @val=0x5a, @void, @void}}, @channel_switch={0x25, 0x3, {0x0, 0x95, 0x3}}]}, @NL80211_ATTR_BEACON_TAIL={0xcc, 0xf, [@preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0x3, 0x57, 0x3ff, @device_a, 0x8, "", 0x1, 0x4, 0x5, [{{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x1}, @device_a, 0x9}, {{0x1}, @device_b, 0x30b7}, {{}, @device_a, 0x401}, {{}, @device_b, 0x8}]}}, @chsw_timing={0x68, 0x4, {0x8001, 0x18}}, @measure_req={0x26, 0x6a, {0x7f, 0x3, 0x9, "0ede241757f53d488f4465c7630921fe875668b74001e93414d987234d6edeab54c3d9f1397af232c3765095b54c98c342f9f4f500d033130ec17880377dccd2b37f0e5b0f7c2feb8de49e45f0de0199e12c149859163d4667b5e4176e13920da3608dc9ae8d6a"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4c, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @ibss={0x6, 0x2, 0xfff}, @preq={0x82, 0x25, @not_ext={{0x0, 0x1}, 0x1f, 0x7f, 0x3, @device_b, 0x1f, "", 0x1f, 0x81, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x8}]}}, @mic={0x8c, 0x18, {0x3d7, "ec64603446eb", @long="b179cae8f2b4ddbd332d3aa20a9a6d38"}}]}, @NL80211_ATTR_PROBE_RESP={0x839, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x9, 0x8, 0x3, 0x0, 0x101]}]}]}, 0xf58}, 0x1, 0x0, 0x0, 0x804}, 0x4008040) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0xd8, 0x0, 0x1c8311fd5f12fe05, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1f, 0x3}, {0x1f}, {0xff, 0x7}, {0x4, 0x6}, {0x3f, 0x5}, {0x3f}], "2471adaadb99e9a2"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x81, 0x3}, {0x7, 0x6}, {0x7, 0x2}, {0x8, 0x6}, {0x5, 0x5}, {0x6, 0x5}, {0x4, 0x3}, {0xff, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x7, 0x2}, {0x3, 0x2}, {0xd7, 0x1}, {0x4}, {0x8c, 0x4}, {0x89, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x1}], "206ef10362df7440"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x3f, 0x5}, {0x37, 0x6}, {0x3, 0x2}, {0x9, 0x4}, {0x20, 0x3}, {0x5}, {0x5, 0x3}, {0x81}, {0x8, 0x7}, {0x2, 0x7}, {0x8}, {0x7f}, {0x1f}], "5be2b5c6a7c16336"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x88, 0x3}, {0x38, 0x7}, {0x9, 0x6}, {0x0, 0x4}, {0x1f, 0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x7f, 0x2}, {0x0, 0x4}, {0x22, 0x2}, {0x1, 0x3}, {0x9, 0x7}, {0x2, 0x2}, {0x81, 0x6}], "a80d9e5bc20dc264"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7f, 0x6}, {0x40, 0x3}, {0xfb, 0x7}, {0x3f}, {0x9, 0x3}, {0x58}, {0xf3, 0x1}, {0x4}, {0x3f, 0x2}, {0x6, 0x3}, {0xfa, 0x3}, {0x8, 0x7}, {0x9, 0x3}, {0x3f, 0x4}], "055dee1a34abdb43"}}]}, 0xd8}}, 0x24008881) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000001700), r3) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) r5 = memfd_secret(0x80000) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x14c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x100, 0x24}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f9c40f3702ab22f5d77e65ab67ae23b7ab7cf20254e89ba2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "888782122e3ff376e0ef537572f0f716d84814af5bc09264"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "44b9b687033e3711cd4934b1aa6bdb3359c61f6a8eda6ef4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "352120eadbb3b2edf2ddc8b735d21e829d426fe774eba025"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5341dde473b055bfea1e8c693416288f9602682d0d42dd49"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x90}, 0x4000040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000001ac0)={0x27, @local, 0x4e23, 0x0, 'lblcr\x00', 0x28, 0x0, 0x6}, 0x2c) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f0000001c40), r5) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 18:36:29 executing program 3: r0 = memfd_secret(0x80000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000009}, 0x20000800) r3 = fsmount(0xffffffffffffffff, 0x0, 0xe5) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2f93}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20008804) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r5 = fsmount(r3, 0x1, 0x2) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8004094) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44c00}, 0x40040) r7 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x2, 0x70bd2a, 0x4, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008044}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080010}, 0x20000004) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000008c0)={@multicast2, @empty, 0x0}, &(0x7f0000000900)=0xc) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x61}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5bc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x20050811}, 0x240d0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000a40)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6f4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000850) [ 63.818872] audit: type=1400 audit(1751913389.722:7): avc: denied { execmem } for pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:36:29 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) r1 = accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x80800) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x40}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044040}, 0x20000800) accept4$inet(r0, 0x0, &(0x7f0000000400), 0x0) socketpair(0x5, 0x1, 0x401, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)=0x101, 0x12) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0xffffffff, 0x37}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3e}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000000) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000700)={0x67, @loopback, 0x4e21, 0x0, 'dh\x00', 0x2, 0x5, 0x22}, 0x2c) socketpair(0x1f, 0x5, 0x6ddb, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x128, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9d02cf4a69c4cb8252847ba1fb9c679e293f6d410dcda96"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7fd36a95c52d141fb8c2c44ce0ef3a20e51f230046d5715e"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x60) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb8, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x3a}}}}, [@NL80211_ATTR_IE={0x61, 0x2a, [@challenge={0x10, 0x1, 0x60}, @prep={0x83, 0x1f, @not_ext={{}, 0x7b, 0x8, @device_b, 0x1, "", 0x1ff, 0x52ad761d, @device_b, 0x3}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1}, @ibss={0x6, 0x2, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xdd, 0x9, 0x2}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0xc8, 0x20}}, @ibss={0x6, 0x2, 0x1000}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4989082a5246"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aa1ce3ba4c73"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) 18:36:29 executing program 5: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xacf0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080c4) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffe1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e3f262350c3d"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x38}}, 0x40) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x48880}, 0x20008000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x120200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x496}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0xdb5ec2f32bb738fb, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008004}, 0x1) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x45}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x15c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x22, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @supported_rates={0x1, 0x2, [{0x70, 0x1}, {0x5, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x34, 0x9}}]}, @NL80211_ATTR_SSID={0x15, 0x34, @random="668f2f0bc3d34934a839d0cc05640e53dc"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0xbd, "5cf43625f41600cb112b93ca314fa18dc2cfe2c758fbc55dde426797d87c97c21d7fa0ebf4d72defca8628c087d14c0ac1c60e1956c67472e5b9a5aaf56a420f5eae7a1ad45f88deaf490672f566cf45889de9ae44fb75e2e8382c54d49c9a2ac2ee7d859f195e70d486cc405311eea81e3b9e9d350ccf118737c11d24ddaadb9161f838e7f93305c5cf688dd99371d32b805fe77189d0a9e2342f1adbe10be7032a7b8f89825645d5d8d8fc9085b78d9fc0fa18c8f5c3ae46dab84f33"}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @prep={0x83, 0x25, @ext={{}, 0x3, 0x1f, @broadcast, 0x1, @device_a, 0x6, 0x0, @device_a, 0x97b5}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x20000884) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x520002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3cde53faf0b5157f}, 0x8080) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r6, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 18:36:29 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff8000}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080048}, 0x80c4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x8850) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4000810) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000003c0)) r5 = memfd_secret(0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000400)={'nat\x00', 0xdf, "1a682dc8b54f259914d11c8b515ebff61d5aabf2d63698897f954026a2667e9f73910e64014e70e20cb0679650c12e5ec98fc04a3559d73ba6a1d146211278ed70929c8750061f587adb445ba2221bb440f51c3d80c6f74c873e796452339cea39cea92e8854c9f613b79752e087077038ad2c358205272b6cb61fa6e3821968d3e286761a0d147ce7a0bfea92fe4d7f12a92698884da25b2c75c7bb297494eaa02da3195fab85b6704079628669a6a6b1cdad8c6a9cc41f3eb7dd4d9d66734501012119d329bf212b7c00f8356c1c8bc326b40d38fc191db27f4686377989"}, &(0x7f0000000540)=0x103) r6 = fsmount(r5, 0x0, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000580)='highspeed\x00', 0xa) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r1) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r8 = getpgid(0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040040) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) 18:36:29 executing program 7: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x80000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x2109, 0x0, {0x0, 0x0, 0x0, 0x2, 0x9}, 0x5}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x6]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x0]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x15, 0xac, "2104ed9f9ef0a4c0d404ec3a21d97575b6"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}]}, 0x64}}, 0x40010) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xef}, @IEEE802154_ATTR_PAGE={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x8145174812203ad}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x4040000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000006c0)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x100) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x0, 0x5dc6bff476179dfa, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044084}, 0x40) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfd9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xeb53}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40008884}, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000b80)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000bc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c40)) [ 65.095379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.100540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.102992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.107720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.111403] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.155752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.162506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.164836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.171678] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.173641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.177955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.179779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.181099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.186193] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.187564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.188787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.189876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.191758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.193261] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.198593] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.201160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.202677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.207467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.212969] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.214655] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.216561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.218580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.218942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.222048] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.223810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.232304] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.233674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.235854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.239343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.243554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.245629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.265055] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.269905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.272280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.297165] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.504281] [ 65.504870] ============================= [ 65.505687] WARNING: suspicious RCU usage [ 65.506479] 6.16.0-rc4-next-20250704 #1 Not tainted [ 65.508872] ----------------------------- [ 65.513366] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 65.514465] [ 65.514465] other info that might help us debug this: [ 65.514465] [ 65.515630] [ 65.515630] rcu_scheduler_active = 2, debug_locks = 1 [ 65.516596] 3 locks held by syz-executor.0/282: [ 65.517300] #0: ffff88800fa5a400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 65.518632] #1: ffff88800c1ae618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 65.520094] #2: ffff88801c4ed9c8 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 65.521466] [ 65.521466] stack backtrace: [ 65.522120] CPU: 1 UID: 0 PID: 282 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 65.522146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 65.522157] Call Trace: [ 65.522165] [ 65.522174] dump_stack_lvl+0xfa/0x120 [ 65.522199] lockdep_rcu_suspicious+0x152/0x1c0 [ 65.522231] proc_sys_compare+0x28a/0x340 [ 65.522251] ? __pfx_proc_sys_compare+0x10/0x10 [ 65.522274] d_same_name+0x229/0x2e0 [ 65.522308] d_alloc_parallel+0x7c1/0x1330 [ 65.522343] ? __pfx_d_alloc_parallel+0x10/0x10 [ 65.522369] ? __pfx_default_wake_function+0x10/0x10 [ 65.522400] ? __d_lookup+0x25f/0x490 [ 65.522431] lookup_open.isra.0+0x64f/0x1530 [ 65.522463] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 65.522505] ? mnt_get_write_access+0x81/0x2d0 [ 65.522525] ? mnt_get_write_access+0x1ea/0x2d0 [ 65.522552] path_openat+0xc26/0x2880 [ 65.522590] ? __lock_acquire+0x694/0x1b70 [ 65.522611] ? __pfx_path_openat+0x10/0x10 [ 65.522649] do_filp_open+0x1e8/0x450 [ 65.522678] ? __pfx_do_filp_open+0x10/0x10 [ 65.522718] ? find_held_lock+0x2b/0x80 [ 65.522746] ? alloc_fd+0x2c1/0x560 [ 65.522772] ? lock_release+0xc8/0x290 [ 65.522798] ? alloc_fd+0x2c1/0x560 [ 65.522833] do_sys_openat2+0x104/0x1b0 [ 65.522857] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.522882] ? __fput+0x67b/0xb50 [ 65.522909] __x64_sys_openat+0x142/0x200 [ 65.522933] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.522956] ? __pfx_fput_close_sync+0x10/0x10 [ 65.522990] do_syscall_64+0xbf/0x360 [ 65.523014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.523036] RIP: 0033:0x7f26f95fea04 [ 65.523052] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 65.523071] RSP: 002b:00007fff7d44bc30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 65.523090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f26f95fea04 [ 65.523104] RDX: 0000000000080001 RSI: 00007f26f96b52bb RDI: 00000000ffffff9c [ 65.523117] RBP: 00007f26f96b52bb R08: 0000000000000000 R09: 00007fff7d44bc20 [ 65.523130] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 65.523143] R13: 00007fff7d44bcd0 R14: 0000000000000000 R15: 00000000000000f8 [ 65.523171] [ 67.126936] Bluetooth: hci0: command tx timeout [ 67.318301] Bluetooth: hci4: command tx timeout [ 67.319580] Bluetooth: hci2: command tx timeout [ 67.319588] Bluetooth: hci5: command tx timeout [ 67.319718] Bluetooth: hci3: command tx timeout [ 67.321173] Bluetooth: hci1: command tx timeout [ 67.321629] Bluetooth: hci7: command tx timeout [ 67.383400] Bluetooth: hci6: command tx timeout [ 69.176246] Bluetooth: hci0: command tx timeout [ 69.366938] Bluetooth: hci7: command tx timeout [ 69.367384] Bluetooth: hci1: command tx timeout [ 69.367408] Bluetooth: hci3: command tx timeout [ 69.367427] Bluetooth: hci2: command tx timeout [ 69.368034] Bluetooth: hci5: command tx timeout [ 69.368445] Bluetooth: hci4: command tx timeout [ 69.430382] Bluetooth: hci6: command tx timeout [ 71.223894] Bluetooth: hci0: command tx timeout [ 71.414322] Bluetooth: hci5: command tx timeout [ 71.414806] Bluetooth: hci1: command tx timeout [ 71.415201] Bluetooth: hci4: command tx timeout [ 71.416077] Bluetooth: hci2: command tx timeout [ 71.416252] Bluetooth: hci3: command tx timeout [ 71.416491] Bluetooth: hci7: command tx timeout [ 71.478363] Bluetooth: hci6: command tx timeout [ 73.270294] Bluetooth: hci0: command tx timeout [ 73.462387] Bluetooth: hci5: command tx timeout [ 73.462796] Bluetooth: hci7: command tx timeout [ 73.464055] Bluetooth: hci3: command tx timeout [ 73.465568] Bluetooth: hci2: command tx timeout [ 73.465935] Bluetooth: hci4: command tx timeout [ 73.466426] Bluetooth: hci1: command tx timeout [ 73.526277] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 18:36:31 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888009a7b700 RCX=ffff888009a9728c RDX=0000000000000000 RSI=ffffffff8141744e RDI=ffff888009a7bafc RBP=ffff888009a97390 RSP=ffff888009a972b0 R8 =0000000000000001 R9 =ffff888009a97378 R10=000000000003ba94 R11=000000000000a0ff R12=0000000000000000 R13=ffff888009a97380 R14=ffff888009a7b700 R15=ffff888009a97338 RIP=ffffffff815ac12a RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b2aa27c9a8 CR3=00000000341ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=732f736761742f766564752f6e75722f XMM01=646d65747379732f736761742f766564 XMM02=ffff000000000000ffff000000000000 XMM03=00000000000000000000000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=000055b2aa27be300000000000000000 XMM07=00000000000000000000000000000000 XMM08=20202020203a657a697320656c696600 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828b59b0 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff88802f89f220 R8 =0000000000000000 R9 =ffffed1001730046 R10=00000000000fe503 R11=0000000000000001 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10e3c2e R15=dffffc0000000000 RIP=ffffffff828b5a05 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556c953400 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6b3be308b0 CR3=000000002f430000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ffff000000000000 XMM02=ffffff0000ff00000000000000000000 XMM03=ffff0000ffffffff0000000000000000 XMM04=ffffffffffffff00ffffffffff000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000