Warning: Permanently added '[localhost]:61573' (ECDSA) to the list of known hosts. 2025/01/22 01:31:31 fuzzer started 2025/01/22 01:31:32 dialing manager at localhost:44689 syzkaller login: [ 70.139348] cgroup: Unknown subsys name 'net' [ 70.272291] cgroup: Unknown subsys name 'cpuset' [ 70.302319] cgroup: Unknown subsys name 'rlimit' [ 76.117123] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.340405] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 01:31:50 syscalls: 201 2025/01/22 01:31:50 code coverage: enabled 2025/01/22 01:31:50 comparison tracing: enabled 2025/01/22 01:31:50 extra coverage: enabled 2025/01/22 01:31:50 setuid sandbox: enabled 2025/01/22 01:31:50 namespace sandbox: enabled 2025/01/22 01:31:50 Android sandbox: enabled 2025/01/22 01:31:50 fault injection: enabled 2025/01/22 01:31:50 leak checking: enabled 2025/01/22 01:31:50 net packet injection: enabled 2025/01/22 01:31:50 net device setup: enabled 2025/01/22 01:31:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 01:31:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 01:31:50 USB emulation: enabled 2025/01/22 01:31:50 hci packet injection: enabled 2025/01/22 01:31:50 wifi device emulation: enabled 2025/01/22 01:31:50 802.15.4 emulation: enabled 2025/01/22 01:31:50 fetching corpus: 0, signal 0/0 (executing program) 2025/01/22 01:31:51 starting 8 fuzzer processes 01:31:51 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xff, 0x79}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0), 0x105081, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001200), 0x4) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000001280)=@buf={0x1a, &(0x7f0000001240)="7e5ae8a5a1d62b4a953116a187e0d507abe290d6ab0244d3233e"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffb}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xfa35d5ad149c7100) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001540)={&(0x7f0000001440), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x40, r0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000016c0)=@req={0x28, &(0x7f0000001680)={'veth1_vlan\x00', @ifru_flags}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x88, r0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x945, 0x2f}}}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "211fb58726"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4810}, 0x4800) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 01:31:51 executing program 1: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40041) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) syz_genetlink_get_family_id$mptcp(&(0x7f0000001280), 0xffffffffffffffff) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$bt_sco(r1, &(0x7f0000001300), 0x8) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x88, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0xe}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0x14, 0x0, @random="a461f4f46ca06c867ea2e50a77fd550d"}, {0xa, 0x0, @default_ap_ssid}, {0x19, 0x0, @random="99e83661b398a1e1e6fdf96ce78c5c5bfc954d9850"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="e65c3f485b05"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x88000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0x8c, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa8f6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004091}, 0x800) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000017c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002bc0)={&(0x7f0000001880)={0x132c, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1b6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast2, 0xb1b}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x1114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5cb8dc25f60444b10c7d108817f52d064afc6f5b"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "a4e9a0f2f46c810b8b48e27b599769908e226067a58476fcef0341eeb2bad85a2a"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "1d9a88a22b3a5c233d928fd755d6ac8bf9280c6ab9663de278ee3684863946a3dca30e299806c0d1d2bff491cd514e721639c70dbc65f2223df2d2d3d5ea911d6b4d4d49f4757c4893e05fb494ca087d875f2a6ac6177088518800cb59e09945fabd21637c656a762e5a54643bbcebcdd6c4eff23927fd18275a0afc9e57b6848a95dd7efc6aa790539517d72be11761c5036f84bab6d08a5a4aebc3861881ec273e93b9a831d42fd3b6ec4009e28a37632fc38a81c773a3418631df54ff0d7e52c92f0842158442af5fa7546e33e328ee4c6494ae33d398e72061e4c3a369d45a91b5d54a3019d94c39742652c7b2882f11e6ac310171f567710b07b858b3e312b483a1698b99d36bb81fd007fe3f1236970c63e249dae261bab3a64451b2d71554599c069f9bd3afe8230246e226ddb2f329f155357626452a2f60ffaebc4465be1e076edf4d6ef1fa2890adb4716b261402a4b7029b8883b24e35825e405872b435cf6447e8537d3d5948b171a38fc268ec152e10825a7ad0bb8cc191001b6f7105a219143a3c7783e6873a53294d66d26bc760bf1b8a5cdec96cd25f8a6c95a34415f53b71ffb414911119d91eda3120d5a2ff1aba447361cf12a78ba05476d84ba5789d7a6d34e1335c61ea3739115b8a676eede95d01e063fb559a3dcf22f291c4a1d3c770478ab328a40bb4f755c83546c592d2b3367358e87fc5d77b50accb29d242c0a11bfcad3dd0ffe10436bac3de783e356c00dbaa4b2cbfdb65083bdcbd70605a62f957e7b9f141c10d2b2bf2fda134d24978988816f6b2643268fad5a54aec9f07b5688b97068425b83468ff0cb929b8a899d579d2aa02a88f05aeb62ede1426d91b128aa40b2eea3a817e1eee35a12a6142b3c2e081f7148033d091851beee155196e6188de0f031655377ec1080c36772e4956bb72cc71949ab31c603cdd07ae6bbc925d37dadc12cbc00d0b2d65c3c287b4e0eaf1b31e1997528451076a91e99ec7c50ace9258771965cb84cc76b6a2c73eded2b4186fc2cfeeda87d2167d3df218b88edd6cfb03d291764c7b725d22bb324e394126f7db35e882de7799c2a56922b462ca0afc3bab14374cf046e502274ddc013dde7d33ce66c306f4fc80e5cca730197f10e8cab26dcf8bf143f841825b3baa5d5a151b9ee1003c2dba0e1e83edbedbdda93b93434fa707a7bbe10778c07043f0b968386cb709699853fd2360b8a680d1ea14df2712119978b9f68893cfb9cef6be05008eda1a248ed175da4966b508c3a8d5c6735dc1e6bb9115278049ce61379a5468d4743feda0557a277256d90470e43797a89c57d362d8668a61b9f114bc77334fc6018f725215b940ffe1fc925c9543e0818467b2618ac40bb95954869bcfaec7e81e08e49806b22d25aec61826dd65d5953bb63b46eea0da1bbc848aee68d891a716a76c87ec7112364c4367135f0029fc0a8a81f832dd350639345bed6b5f7214f6bab0e96bb319e45ba93deb74188f8f58ce32f3dd5982c630a385b3bcdf0abc4332715eb9b43fcc3684dfb611526ae3d427c5cfff6e4492dbd63ea0b5258c400e797a49685cfc0425fe4043d2bd9ef2309681a7cec0feff0b03d240ac501d1b03d082f9d21bf0df7b89aa10b7cc312b81d7bc59601bee72d27cacba28da3ec149030bd35a98ca900be1d4e55c5288d1d480f81759fd13fdeb29830718733d455fcb35e789b2819cec5dfd42a6b1b4cde4f0c5137d77fcf3c1c17e89701577b1130982a143dfdd791be232969fe603ff67df10f0cf7ee1767c6938e59772ff88b19bf2184d9d0c96ad1abc65cb7ba451b421d5d14aaff9c61737351b3279987b815b92ec8a1b7cfdcc4403ee45e278d8df7b86269f0e7b58c22d5e565a37e77e69e0a048711a4c9b7ebe81f2afc0b19c338fade3bcdc6f721a70c505aded885265b29f5f92a5d766473ea1499df1d0a0775b69c02f6b844ae0263b1ec1058c05b6368a7e28b38da52f2482e32876028beb8fc1c6f1139e4c1a26e60525d26a122bbe0477677f9edc30ae5a55f5bc1e8e6851aac7b461118b004fd28e4d94bf3fda3d194c157c5ecba36cfa6e1cf89a4f57f843eede11465156bb53bc48a7408ee8097e968957c062a9c985275f3789d572fac514b76b6027487c19ccea08bb783e5580656af6f0385081da1c1d2f1b9cdf84fecb7fd8fec588c1d733981a41a6e12774ea8b8aafdbc3a993cb5f13fa1ce334bd1cb095d4d65153dfd29c0dca96e0c4138dd8cd34291edb543bbb30cc2234a4268fe94b35092008adeaca4167c8449f169a55ce13bcb682842406d6e992dde7abd13dc8ac109ba22b0ca81006c65a2744d573494fdff31e12b0365195e4d3e82968d7ab79bd49b5d83fc3333346bd5ced7b7a31dfd5d0fadcf75790b63f39f18d04e5ab127ab26f4e107b81fc2c07e29a1224b16536894192a44cec87efd65ce5e70d137c69cf76aca7be3a139e1fd9f1150acff1c1da00cb0b887ad2c166a462dfb277ca93df5584ad019ef8d3d87ecd1fad82fb6b081d62761f73d98ff9376cd9637df3db61d488f28f5b747a68146c877e0174eb2386047de54ce82696a63af261877e709d413303e1d6c40e2666d501fc8e0ff0b884ea7fb9a00c3275f1b4e30bb943b19356c0ecadbbb87dbd26bd742cf5e1e323dc6d79656f931cea197161494f952af3eb9db69e9e526aee6fd335edb9c579559e9171ee20e9e641e14de4e3eea1120d52746de71ecffec474309a832446f77ccba7870074cf66d66a40aa58eaa3fa4695008ae4dfe31cf1d95020aabc1259b854b8ec024b22748871a2ca7ea8fb465dc55f54aad8f23d2561db0e9b9ab9ab8d5259d51ec1c5fe2de19fe329a91b0be7c005f0def38cfd806b1cca5e5054fa413aab7a69202c612483468281be0dfcbadaabb00adeb3b4cd12838256c24996485c42a5eb29abcc72ab034b99c452cba677424d2426dbd030143dc44a22ea273a2268923a6bab3708eb7b8d6c5cb5576dd150d58874184b88f6571fd9fcf293326d73de1bc8579702bbf23c4c2bbb6aa5fa100694a61574435f04fcecf82a58d486b7fdca98bb369eac8c84cbc29017cc35712d7fb9b7c9aa556e26b11817bfee618d2f9db34003a2eb041ae6b92d670029b572c9673d1306ed0596796ba6597ccaba0660ce72c0049caa8de856cdadfce46060fd08127d9bcc461613cd88ef64707596a53fbdc5264fc9b2b91457026165921c085107835b1a5d1a14097fec05c4b85d809432c6ef0d6f017571ca076a904a26fc654d3343bf966a33e7f5973d4d7ef79d92ce8911b3fa9095d22b190df40300dffec7cba664c10d1a8a852ccb7183cac7f7e8417593f4ef3b14b5c97cbfcf6a31333e84b6d50b280f67c8be74d048704861041182f5cfba9ccdd85367bb6002399043bfac6f43703dc116dff0a978f5527ccdab1a7e5266846a69c79a078a98d48ea7e29d74ad8813dab2489bb7b42ace8cec2dbb5f387ae0f5c9ab16af4d3beb5631fe2a5f5f300fc89c51436da31be15c84282c774e4ee50e9599451a8158a5b339612fd8d29847aed0234c8d564f81e6ee545fe9b12a04b4e09541d9de5cb5743d823a57ea4cd7000bd3ce08ed9291d8b8ddee9bc5b505b803c582064e9d3d64b0239f3f2e19be88ca835b227c4d711fd9d5a5e68914122f2d535d9da229cf8fd0f4eaecc1952b4e7eb96c66ca21c1a4fdf5ac4547eab736966dedd16161bd54f568ac915d533f8f0ff703283a398a5d946207fc588de71d6382981f80524ffb16d2240577267ce66420b0aa604b2ce45cb66bafbadc358f8cbc5732f79d1c2d4dfdc057429c886e91a4ea029ac5037fc6afce180119e5c8311f1aec8c3c9fe6d77423127e1276d289fb18898d680442ed33ba1c9bab5ccb32414b537437c2f6d1c78830743a470f666920fc174bf160e9d80dbb5c9d5ad7c69c58bebbd50938b099aace1063421c74cff6cf097c10f678e06d3e71d00604670cfd837bb7facfebbecaf3313e20ab127f8f3c0caf6bb024b4c049cd17708c35c768bc837a55849d75a2ecfc9ce29a1f92c4d23348688c55f643b49f7aa98251e01efe82d272c92758100a605cf436239c31a52ee2f5f01ae4761c93d3c40a9679874e4e369ed791d8219d678b74ddb5a1d017171ee51d8428851e960cf9a8ff7114b3aa3f4af4af021a2dbdd567babc572ddafdbf94046fc290b4477eb03e380e63b96dcbf842047d85da401181ad86a6ef625cd59ea3f85969f3cc1ae04e26f0b7788cc6f848029aa3fe8dd96c72aa22ebc449c7b38fa2ec45da96f9a5b0d70071aa95ebda9843864dba446f780c1f62540ce88962f5656bf8e348f0580cc78a7e440bf4d241f5a240cc6f8199a255aa7aa09f5c137ef718361942164cb645589a1195b262a511548d93e214c640af8255be0c046044d8fc5f53160151c230606ba22fe9bda60e904e2d00767ab5561fe80c9114aa2ba615f3d5c06514f7fba5a27f426c47a613b924a436515b8f8ef29b049bc05678ac36beabb179bba230123e7340e7aeb6116f1447b3c15b77616bd8ded56ce447e95c486217740cfd28a9298f3bba13896d1b54ee08870dc0353b369ef2f8288da50c79dd67282ee5301fc670b5abd0b5761c5fe0194901456fd69a17c4b9aa55fe6e495ddac368f82f0155e36166f4008c624388771f673755c1030b6f996ba148119f4fd42938a92c3a4fe0498870396a897d76f5bfc3e208e0140cad0f37bf74afbfdc77cb4ccbe4a1feeed76153e4458049ab548926b3206554b25c87134c7e1f10e9313ceb8cdd07401094153d11dd83ca6fb7591ec5912730751e3fdf35877ccfbffe067be2c153a363c38be396e971092513e11127778be1af2eae1c6b5bd403f1bba7dd9156f6ae1f7ef144f3ee4e22bb479314da34f4e472bba87404ad5523b4c15d44ad58806a5bb148360ca0f966a8be0baa2f99594e587231ab2d6ee338e8c1cc91a439bd8a85d491d0ba65c7a9e169db05e3860036dd8f9bc955ddfb3af6ed12f200b7838a45570ead5957199b0733427e24505ddc52a2f66b64c31d178b06275e9f46b97b71d768db701eceebe06056d6bf501c9dacb5e72c6893d37c4a91d60ee9d2bf58a0d2a6573a5917ae4db5e43ef6eed06548b58bf0f5d08b5ae0a4f93afeb49210ea9e372056d3cbda5459a9490bef32142999f60ba37dd566135f1066e550106b3b69f080d4d7c7483e4097a9d18c3bf443c0d709dbae208b4b3c6097567f119c776191532ec0e867e50582e88d13abb5ba24df351df04da239bc9956453ba097145b784f8394fb82242a3c139acd408cfb6f5c73dd2294cf260ed303a6d43bd890c4b9d8bee792886e391c5c2096d5c126452b0a7df024725b5b257e36f5c47477c53d51dbc5f142eeb8498a536c8f625fb23c5697b5a07bb37c3f3fa6cd79ed170db680d880180b1f1214e794db7d576e6900f5807c98ab53088e3b06de168d5257869ca284f3b49594921c7dc06dd71c597dfb56a8a37588101edd6df844b3c7aeaa8c7d581413d1ff0c318fbfb89d808409d86868721aae7d915275463e125db10a30752cfa4c5cd222f26ec6651c184ba0b0f58497a4c00a8d638d738b2acca414bc4f5bf8ccdfd46214b8bcd4c4f9fe74ddd24dd0d29922f10fc59453bc49d061f012a1bbbd5a93da5fe86c6c15b5533aadd6ff64bb812ba61ed5ee71a4508753f25d4e2bb9e2081ffa7a32b6ea073fe1253393eb83441517adb21745f43f178a1ff9cc"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "da362f203942fe30e8a5044cfcf6e2d3d6eb14a7e948f6911c483abf"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "b8e3eebcb800cdeca4b8215166022cff3aba5a4726"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5f29}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x29de}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb5f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x132c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000001) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000002c80)={0x0, @llc={0x1a, 0x205, 0x6, 0x7, 0x3f, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @nfc={0x27, 0x1, 0x1, 0x7}, @generic={0x1e, "4467877b8cb95a3ffca16be0aea1"}, 0x6, 0x0, 0x0, 0x0, 0xd09, &(0x7f0000002c40)='wg1\x00', 0x3, 0x3, 0x2}) r6 = socket(0x25, 0x5, 0x9) connect$bt_sco(r6, &(0x7f0000002d00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = syz_genetlink_get_family_id$team(&(0x7f0000002d80), r6) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003780)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0xa098280}, 0xc, &(0x7f0000003740)={&(0x7f0000003180)={0x590, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x35}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x80, 0x3, 0x78, 0x6}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x590}}, 0x45) 01:31:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x1, 0x8, 0xa000000, 0x200}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "4c66c9d6088bb07f", "d262527cb7c7da0a8338f972c15641b5", "83e98c15", "d5ce879f41477076"}, 0x28) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x40010, 0xffffffffffffffff, 0x8000000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)={0x5ec, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x10}, @NL80211_ATTR_AKM_SUITES={0x24, 0x4c, [0xfac0b, 0xfac0e, 0x0, 0xfac07, 0xfac0b, 0xfac11, 0xfac01, 0xfac0e]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xdada}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}], @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}], @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_SAE_PASSWORD={0x11, 0x115, "f98fa4550571ba714a2cc95f08"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x81, 0x115, "81cef6d8f30675c2883cddc6bf7b67c95fef24030e133b3e14d2c200ae957efd178a93c6a0721485bc18587ba2f63720275a7042a5d1da401384794bbf4e79dd7567b3c178c25ed04f5f253f563af4842ec80e393eb539e67f81e973f2c8d269e6918d872cc63b526b0f8a8bd6ceee1a4c44c1123ffe952f3bd6ba087b"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac02, 0xfac04, 0xfac06, 0xfac04]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x16}, @NL80211_ATTR_SAE_PASSWORD={0x56, 0x115, "18900047b8712fc2a77be8609dcda9881e2f46baf934eae1ab7ef0f97e31d81363646f4feac9f9b64b396b7887bd61de0331508418db84b6119d2f8c9c2f1f507f1875fcbdfe8a428d3a973db55525743700"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) r3 = memfd_secret(0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x410, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x20}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000008c0)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000900)=[r0, r0, r0, r0, r1, r4, r5, r6], 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2d}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80011) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r3, 0x10000000) syz_io_uring_submit(r2, r8, &(0x7f0000000ac0)=@IORING_OP_NOP={0x0, 0x1}, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000b00), r9) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0xf0b1c072ca6a7301}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x30}}, 0x8cc4) 01:31:51 executing program 3: sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044850}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x951}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf0f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1ce}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xae8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x44004) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1003}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x38}}, 0x8010) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x138, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x5, 0x3}, {0x5, 0x6}, {0x80, 0x3}, {0xa8, 0x6}, {0x1f, 0x3}, {0x2, 0x2}, {0x9, 0x3}, {0x81, 0x2}, {0x7f, 0x1}, {0xa5, 0x1}, {0x80, 0x2}, {0x1, 0x2}, {0x1, 0x2}], "9cfbd85faa510963"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "d6baeb1536eb650a"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x0, 0x2}, {0xfb, 0x5}, {0x0, 0x7}, {0x20, 0x4}, {0xfd, 0x3}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x1, 0x3}, {0xc1, 0x2}, {0x5, 0x2}], "b1459ab357f2a520"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x4, 0x1}, {0x0, 0x4}, {0xc1, 0x3}, {0x1, 0x4}, {0xff, 0x6}, {0x5, 0x5}, {0x16, 0x7}, {0xa4, 0x5}, {0x6, 0x7}, {0x31, 0x5}, {0x8, 0x7}], "fb80f66908357b97"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x80}, {0x1, 0x3}, {0xf9, 0x6}, {0xff, 0x7}], "5fc32045edbb0c9a"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x80, 0x6}, {0x40, 0x6}, {0x1, 0x7}, {0x7, 0x1}, {0x7f, 0x4}, {0x3, 0x1}, {0xd, 0x7}, {0x0, 0x3}, {0x5, 0x3}, {0x64, 0x7}, {0x1, 0x3}, {0x81, 0x5}, {0x7f}, {0x20, 0x7}], "a0bb11982e51bbdf"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1f, 0x1}, {0x13, 0x1}, {0x8, 0x5}, {0xbe}, {0xa0, 0x6}, {0x7f, 0x6}, {0x1, 0x5}, {0x40, 0x3}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x20, 0x1}, {0xc7, 0x7}, {0x0, 0x3}, {0x88, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x5}, {0x9, 0x3}, {0x8, 0x3}], "c32df99e4b08afa1"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x1}, {0xdb}, {0xc0, 0x4}], "adafa441b2e61ff8"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x7}, {0xf8}, {}, {0x9c, 0x1}, {0x1f, 0x5}, {0x4, 0x6}, {0x81, 0x2}], "fe614eb62bfaeb1c"}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040000}, 0x24004840) r0 = socket(0xb, 0x3, 0x29) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0xc000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x324, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x586f52d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff80}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcfd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffff25, @private1, 0x9f74}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan1\x00'}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80480, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x430, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "0b9286f16d3ea0cf5a032fdfe093224e"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6a73464e1b623489}, 0x4000805) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000e80)) pipe2(&(0x7f0000000ec0)={0xffffffffffffffff}, 0x2800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x94, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="ae8b7bb81ef8"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "4809532e1673a81223f2c33a37888959"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="a77bc0a84be8f53e2f95487c5fe27c604a8cbe156244799b95e39de04272"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x17, 0x34, @random="4c35cc214e18408e5578b70d67d695d5c30f1e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) 01:31:51 executing program 4: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'batadv0\x00'}) r1 = socket(0x2c, 0x5, 0x174) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x23, 0x8, 0x3, 0x12, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x1, 0x8, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', r2, 0x4, 0x32, 0x0, 0x6, 0x31, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7, 0xffffffff, 0x7ff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r3 = memfd_secret(0x80000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f0000000400)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x7) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x280, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffc01}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc00}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}, @NL80211_ATTR_REG_RULES={0x15c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff7f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x41b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3c6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x879}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x66c}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x280}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r7, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c001}, 0x40000) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000b00)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, @sco, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x615596d9, 0x4, 0x3}) 01:31:51 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000a, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x80000, 0x1}, 0x2) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80002010}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4004004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TUNSETLINK(r2, 0x400454cd, 0x201) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = accept(r2, 0x0, &(0x7f0000000380)) socket$inet6_udp(0xa, 0x2, 0x0) r5 = accept(r3, &(0x7f00000003c0), &(0x7f0000000440)=0x80) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x1, 0x1, 0x30, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x1, 0x1, 0x74f}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x48}}, 0x40) r7 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mount_setattr(r1, &(0x7f0000000680)='./file0\x00', 0x800, &(0x7f00000006c0)={0xc, 0x10000a, 0x100000, {r7}}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 01:31:51 executing program 7: r0 = socket(0xf, 0x1, 0x6) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x710, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40040}, 0x1) socketpair(0x3, 0x2, 0xfffffe00, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x576d, &(0x7f00000001c0)={0x0, 0x91ff, 0x1, 0x3, 0x2dc}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000300)={r3, r4+10000000}, 0x1, 0xcb4a8f09a5fd4081, 0x0, {0x0, r5}}, 0x10000) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3, 0x9, 0x4d, @private2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x700, 0x7800, 0x0, 0x6}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) inotify_init() sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000780)={&(0x7f0000000480), 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x264, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TESTDATA={0x7c, 0x45, "7333ffa46bf3d9f60e2a3c78c74214a9b28d00b95ee73759f9e1b2f66717b92ed3e7f95e8fc3ee578bf17987ff99709e468a17afa318e935d06221d96c55e6b1ebeacd0c13e4c5a8afb27f113d9ca98cbff91b209428cd7a388f802912663c79fc64753083b1b077082e936bdb4cb5388896d0dc16d40985"}, @NL80211_ATTR_TESTDATA={0x33, 0x45, "ff107d63e71a9b9392943abc8438a6802ef88ea68bafe99105b5bac8b92b4cbdc6c17cdf020d5c77360d223d39db79"}, @NL80211_ATTR_TESTDATA={0x87, 0x45, "d7de89383271aaa742b07336258c159d0d655c3d2cd998b1d997388404f9ebf2989acdfc381eef586f9f193b572259f1fa6be6c96f6f2e732c3ce356cf33697009544aa4eb179d1d9d885e98238817b04d423fd0d7625bac5dad2c98231b7e3733ba77affc61d2aee4033d82725d0c09b48c34ea379be88f559e22fe19b22080890e46"}, @NL80211_ATTR_TESTDATA={0x43, 0x45, "f01eb8c9e13668a84f16bd7648e06a978eb55fdc2db91adb1be91c6913bbcf0c961dc161bf3310824e5815059dd679c8143fa55ff7674ac23a154b898e5b9f"}, @NL80211_ATTR_TESTDATA={0xc9, 0x45, "edffafcb6c60ed24b900ececf5dddd0dc934d6bfbe3ac91d5db6bbd1fdd7fe165fec7e81c863a493a278698070af6b89a13094908b9175424d79e2db4a2ef06c900f96d13db7d6b457bf2ad96f48571e46ce923d67688332de09d20474f9df98bddf0b71bc145599ba62ceb138ad8d7dbb282740bb90c43428e0c09af5980dc4d4fe1eed779f004c9d7a2dcd11424c1a40f9c9f7da550461a7eaf39c857ffdb729fe0c4520ee1fa08c750db7d69041ad6b0a4dd01d143dd3e8db8f354d022dd30dfa8417e7"}]}, 0x264}, 0x1, 0x0, 0x0, 0x880}, 0x40800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r10 = memfd_secret(0x0) ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) r11 = accept4(r0, &(0x7f00000008c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000000940)=0x80, 0x400) setsockopt$inet_tcp_int(r11, 0x6, 0x12, &(0x7f0000000980)=0x8e55, 0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={0x0, @phonet={0x23, 0x2c, 0x4, 0x6}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, @xdp={0x2c, 0x4, r8, 0x19}, 0x7, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8001, 0x8, 0x67d1}) 01:31:51 executing program 6: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x800000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x90124b8f5b7e563a) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x104, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f7073e4060fc539ca68f843ef844d5f9b8a983b80ae5027d"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f084e972bc541d2f2a2a5843d71481e810cb323524197ee5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0eae37695e6c9e5b7fa13c7e4edcf7c48ae3988c823479e"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040815}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3f, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "64aa8904d0b3693f4c1b1911e849f89e"}]}, 0x60}, 0x1, 0x0, 0x0, 0xa992088e12833ab4}, 0x24000810) r5 = memfd_secret(0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r0, 0x12, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'macvtap0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x2040004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x13, @l2={'ib', 0x3a, 'wg2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x2404c040) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x80, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1f80000, 0x53}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x8, 0x6}, {0x5, 0x5}, {0x80, 0x6}, {0x0, 0x14}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x8}], "b5174e4ccd85a5a9"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6}, {0xf9}, {0xfc, 0x1}, {0x75, 0x6}], "739b63e316c249fc"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x2, 0x2}], "2b7c9c0806a912b9"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xa8, 0x3}, {0x54, 0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0x6}, {0x2}], "e047af75ef9857b5"}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10400004}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x20000000, 0x80}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20008041) pipe2(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r8, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x41}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) [ 89.272158] audit: type=1400 audit(1737509511.789:7): avc: denied { execmem } for pid=278 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 90.428591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.434858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.436958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.442984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.446321] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.450295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.554946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.558390] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.562854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.571026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.576027] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.577140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.628756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.634844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.636829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.642166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.648193] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.650166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.687448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.692885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.693398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.697157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.697531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.704153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.707171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.716324] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.717955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.724087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.736275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.737793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.755162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.765258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.769291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.800769] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.804431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.810367] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.812372] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.814550] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.815438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.818095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.831182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.842236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.846386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.854136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.868082] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.868446] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.872013] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.872327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.515355] Bluetooth: hci0: command tx timeout [ 92.642163] Bluetooth: hci1: command tx timeout [ 92.706729] Bluetooth: hci2: command tx timeout [ 92.769780] Bluetooth: hci3: command tx timeout [ 92.834400] Bluetooth: hci5: command tx timeout [ 92.834513] Bluetooth: hci4: command tx timeout [ 92.962228] Bluetooth: hci6: command tx timeout [ 92.962708] Bluetooth: hci7: command tx timeout [ 94.562022] Bluetooth: hci0: command tx timeout [ 94.690373] Bluetooth: hci1: command tx timeout [ 94.753926] Bluetooth: hci2: command tx timeout [ 94.818875] Bluetooth: hci3: command tx timeout [ 94.882370] Bluetooth: hci5: command tx timeout [ 94.882539] Bluetooth: hci4: command tx timeout [ 95.009779] Bluetooth: hci7: command tx timeout [ 95.009874] Bluetooth: hci6: command tx timeout [ 96.611717] Bluetooth: hci0: command tx timeout [ 96.737757] Bluetooth: hci1: command tx timeout [ 96.801728] Bluetooth: hci2: command tx timeout [ 96.865760] Bluetooth: hci3: command tx timeout [ 96.930026] Bluetooth: hci5: command tx timeout [ 96.930730] Bluetooth: hci4: command tx timeout [ 97.057920] Bluetooth: hci6: command tx timeout [ 97.058045] Bluetooth: hci7: command tx timeout [ 98.658770] Bluetooth: hci0: command tx timeout [ 98.786447] Bluetooth: hci1: command tx timeout [ 98.851708] Bluetooth: hci2: command tx timeout [ 98.914807] Bluetooth: hci3: command tx timeout [ 98.980803] Bluetooth: hci4: command tx timeout [ 98.980830] Bluetooth: hci5: command tx timeout [ 99.105870] Bluetooth: hci6: command tx timeout [ 99.107838] Bluetooth: hci7: command tx timeout [ 153.596969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.602090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.603702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.609382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.616082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.617492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.709545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.715048] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.719434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.723328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.730583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.733952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.737979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.738315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.741350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.743880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.744427] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.748132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.749792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.751362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.751944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.752767] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.753216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.760334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.760940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.769931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.779171] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.783096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.784289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.784766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.785313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.794730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.816840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.817045] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.819221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.820115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.831020] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.835500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.840851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.846011] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.850037] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.851552] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.851974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.856918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.862408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.874326] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.950955] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.952380] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.681877] Bluetooth: hci0: command tx timeout [ 155.873729] Bluetooth: hci2: command tx timeout [ 155.874064] Bluetooth: hci5: command tx timeout [ 155.874227] Bluetooth: hci1: command tx timeout [ 155.938892] Bluetooth: hci3: command tx timeout [ 155.938991] Bluetooth: hci6: command tx timeout [ 156.001780] Bluetooth: hci7: command tx timeout [ 156.001814] Bluetooth: hci4: command tx timeout [ 157.729793] Bluetooth: hci0: command tx timeout [ 157.921828] Bluetooth: hci1: command tx timeout [ 157.921961] Bluetooth: hci5: command tx timeout [ 157.922118] Bluetooth: hci2: command tx timeout [ 157.987728] Bluetooth: hci6: command tx timeout [ 157.987797] Bluetooth: hci3: command tx timeout [ 158.050026] Bluetooth: hci4: command tx timeout [ 158.050531] Bluetooth: hci7: command tx timeout [ 159.778776] Bluetooth: hci0: command tx timeout [ 159.969792] Bluetooth: hci2: command tx timeout [ 159.970128] Bluetooth: hci5: command tx timeout [ 159.971690] Bluetooth: hci1: command tx timeout [ 160.033766] Bluetooth: hci3: command tx timeout [ 160.034749] Bluetooth: hci6: command tx timeout [ 160.098747] Bluetooth: hci7: command tx timeout [ 160.099177] Bluetooth: hci4: command tx timeout [ 161.828790] Bluetooth: hci0: command tx timeout [ 162.017800] Bluetooth: hci2: command tx timeout [ 162.018484] Bluetooth: hci5: command tx timeout [ 162.020123] Bluetooth: hci1: command tx timeout [ 162.081809] Bluetooth: hci6: command tx timeout [ 162.081973] Bluetooth: hci3: command tx timeout [ 162.145822] Bluetooth: hci4: command tx timeout [ 162.147879] Bluetooth: hci7: command tx timeout [ 215.825180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.827968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.833000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.835324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.837278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.837388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.845392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.850560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.853343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.868040] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.883738] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.885149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.918961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.924101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.926846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.932356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.937284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.939872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.967055] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.974938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.986886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.995921] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.997833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.012234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.020544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.028238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.032161] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.044127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.053385] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.057025] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.071119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.075091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.076460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.098888] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.105326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.106824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.129071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.144918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.146168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.150393] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.155303] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.157211] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.200947] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.202399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.204356] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.211857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.213571] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.214203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.889691] Bluetooth: hci0: command tx timeout [ 217.954702] Bluetooth: hci1: command tx timeout [ 218.019748] Bluetooth: hci2: command tx timeout [ 218.145733] Bluetooth: hci3: command tx timeout [ 218.147080] Bluetooth: hci4: command tx timeout [ 218.209730] Bluetooth: hci6: command tx timeout [ 218.209919] Bluetooth: hci5: command tx timeout [ 218.274277] Bluetooth: hci7: command tx timeout [ 219.938920] Bluetooth: hci0: command tx timeout [ 220.002058] Bluetooth: hci1: command tx timeout [ 220.066917] Bluetooth: hci2: command tx timeout [ 220.195183] Bluetooth: hci4: command tx timeout [ 220.195354] Bluetooth: hci3: command tx timeout [ 220.257924] Bluetooth: hci6: command tx timeout [ 220.258080] Bluetooth: hci5: command tx timeout [ 220.321711] Bluetooth: hci7: command tx timeout [ 221.985702] Bluetooth: hci0: command tx timeout [ 222.051443] Bluetooth: hci1: command tx timeout [ 222.114730] Bluetooth: hci2: command tx timeout [ 222.242442] Bluetooth: hci3: command tx timeout [ 222.242526] Bluetooth: hci4: command tx timeout [ 222.305741] Bluetooth: hci5: command tx timeout [ 222.305826] Bluetooth: hci6: command tx timeout [ 222.370942] Bluetooth: hci7: command tx timeout [ 224.034823] Bluetooth: hci0: command tx timeout [ 224.098639] Bluetooth: hci1: command tx timeout [ 224.162852] Bluetooth: hci2: command tx timeout [ 224.291199] Bluetooth: hci4: command tx timeout [ 224.292549] Bluetooth: hci3: command tx timeout [ 224.353818] Bluetooth: hci5: command tx timeout [ 224.354008] Bluetooth: hci6: command tx timeout [ 224.418832] Bluetooth: hci7: command tx timeout [ 278.140134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.144278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.146742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.157231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.158490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.161266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.164014] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.167298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.169552] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.173854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.182517] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.184473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.291220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.301557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.308363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.315261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.319194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.329467] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.332161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.334359] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.335169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.344941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.352965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.354291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.398140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.408086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.426091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.435142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.441801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.444039] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.457879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.463502] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.467677] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.471670] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.473099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.475223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.475346] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.476533] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.480168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.483804] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.487061] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.490447] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.495382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.499290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.502037] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.508121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.529134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.531152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.225880] Bluetooth: hci0: command tx timeout [ 280.226284] Bluetooth: hci1: command tx timeout [ 280.418276] Bluetooth: hci2: command tx timeout [ 280.482655] Bluetooth: hci3: command tx timeout [ 280.546695] Bluetooth: hci4: command tx timeout [ 280.547445] Bluetooth: hci6: command tx timeout [ 280.610695] Bluetooth: hci7: command tx timeout [ 280.611043] Bluetooth: hci5: command tx timeout [ 282.274677] Bluetooth: hci1: command tx timeout [ 282.274763] Bluetooth: hci0: command tx timeout [ 282.466685] Bluetooth: hci2: command tx timeout [ 282.530079] Bluetooth: hci3: command tx timeout [ 282.594022] Bluetooth: hci6: command tx timeout [ 282.595419] Bluetooth: hci4: command tx timeout [ 282.657821] Bluetooth: hci5: command tx timeout [ 282.657971] Bluetooth: hci7: command tx timeout [ 284.322556] Bluetooth: hci0: command tx timeout [ 284.322852] Bluetooth: hci1: command tx timeout [ 284.513898] Bluetooth: hci2: command tx timeout [ 284.577735] Bluetooth: hci3: command tx timeout [ 284.641746] Bluetooth: hci6: command tx timeout [ 284.642848] Bluetooth: hci4: command tx timeout [ 284.705873] Bluetooth: hci5: command tx timeout [ 284.707743] Bluetooth: hci7: command tx timeout [ 286.371470] Bluetooth: hci1: command tx timeout [ 286.371694] Bluetooth: hci0: command tx timeout [ 286.561715] Bluetooth: hci2: command tx timeout [ 286.626673] Bluetooth: hci3: command tx timeout [ 286.689775] Bluetooth: hci6: command tx timeout [ 286.689907] Bluetooth: hci4: command tx timeout [ 286.753929] Bluetooth: hci5: command tx timeout [ 286.754056] Bluetooth: hci7: command tx timeout [ 338.125307] [ 338.125569] ====================================================== [ 338.126170] WARNING: possible circular locking dependency detected [ 338.126753] 6.13.0-next-20250121 #1 Not tainted [ 338.127201] ------------------------------------------------------ [ 338.128195] kworker/u8:0/11 is trying to acquire lock: [ 338.134286] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.136485] [ 338.136485] but task is already holding lock: [ 338.137717] ffff888027b28768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.139848] [ 338.139848] which lock already depends on the new lock. [ 338.139848] [ 338.141496] [ 338.141496] the existing dependency chain (in reverse order) is: [ 338.143051] [ 338.143051] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 338.144488] __mutex_lock+0x13d/0xb50 [ 338.145491] wiphy_register+0x1b2e/0x25d0 [ 338.146576] ieee80211_register_hw+0x23a4/0x3d60 [ 338.147758] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 338.148987] init_mac80211_hwsim+0x389/0x870 [ 338.150141] do_one_initcall+0xf9/0x640 [ 338.151190] kernel_init_freeable+0x53d/0x7a0 [ 338.152343] kernel_init+0x1e/0x2d0 [ 338.153277] ret_from_fork+0x48/0x80 [ 338.154241] ret_from_fork_asm+0x1a/0x30 [ 338.155308] [ 338.155308] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 338.156658] __lock_acquire+0x29fd/0x4580 [ 338.157713] lock_acquire+0x19b/0x520 [ 338.158705] __mutex_lock+0x13d/0xb50 [ 338.159698] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.161036] unregister_netdevice_queue+0x224/0x2e0 [ 338.162245] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.163465] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.164678] ieee80211_unregister_hw+0x55/0x3a0 [ 338.165816] hwsim_exit_net+0x3a0/0x730 [ 338.166843] ops_exit_list+0xb3/0x180 [ 338.167822] cleanup_net+0x546/0xad0 [ 338.168810] process_one_work+0x8ee/0x1a10 [ 338.169902] worker_thread+0x674/0xe70 [ 338.170952] kthread+0x3ab/0x720 [ 338.171861] ret_from_fork+0x48/0x80 [ 338.172797] ret_from_fork_asm+0x1a/0x30 [ 338.173862] [ 338.173862] other info that might help us debug this: [ 338.173862] [ 338.175492] Possible unsafe locking scenario: [ 338.175492] [ 338.176730] CPU0 CPU1 [ 338.177702] ---- ---- [ 338.178690] lock(&rdev->wiphy.mtx); [ 338.179555] lock(rtnl_mutex); [ 338.180819] lock(&rdev->wiphy.mtx); [ 338.182180] lock(rtnl_mutex); [ 338.182957] [ 338.182957] *** DEADLOCK *** [ 338.182957] [ 338.184185] 4 locks held by kworker/u8:0/11: [ 338.185138] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 338.187366] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 338.189490] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 338.191274] #3: ffff888027b28768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.192670] [ 338.192670] stack backtrace: [ 338.193272] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250121 #1 [ 338.194332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 338.195269] Workqueue: netns cleanup_net [ 338.195689] Call Trace: [ 338.195945] [ 338.196169] dump_stack_lvl+0xca/0x120 [ 338.196579] print_circular_bug+0x47b/0x750 [ 338.197013] check_noncircular+0x2e9/0x3c0 [ 338.197435] ? __pfx_check_noncircular+0x10/0x10 [ 338.197904] ? hlock_class+0x4e/0x130 [ 338.198286] ? mark_lock+0xac/0xed0 [ 338.198655] ? srso_return_thunk+0x5/0x5f [ 338.199090] ? timerqueue_del+0x83/0x150 [ 338.199498] ? lockdep_lock+0xba/0x1b0 [ 338.199907] ? __pfx_lockdep_lock+0x10/0x10 [ 338.200354] __lock_acquire+0x29fd/0x4580 [ 338.200782] ? __pfx___lock_acquire+0x10/0x10 [ 338.201227] ? lock_release+0x20f/0x6f0 [ 338.201633] ? __pfx_lock_release+0x10/0x10 [ 338.202072] lock_acquire+0x19b/0x520 [ 338.202454] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.203026] ? __pfx_lock_acquire+0x10/0x10 [ 338.203463] ? srso_return_thunk+0x5/0x5f [ 338.203902] ? lock_release+0x20f/0x6f0 [ 338.204312] ? srso_return_thunk+0x5/0x5f [ 338.204750] ? lock_is_held_type+0x9e/0x120 [ 338.205201] ? srso_return_thunk+0x5/0x5f [ 338.205647] __mutex_lock+0x13d/0xb50 [ 338.206053] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.206617] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.207193] ? srso_return_thunk+0x5/0x5f [ 338.207629] ? synchronize_rcu_expedited+0x38a/0x420 [ 338.208144] ? __pfx___mutex_lock+0x10/0x10 [ 338.208595] ? __pfx_autoremove_wake_function+0x10/0x10 [ 338.209129] ? srso_return_thunk+0x5/0x5f [ 338.209560] ? kasan_quarantine_put+0x84/0x1e0 [ 338.210046] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 338.210504] ? srso_return_thunk+0x5/0x5f [ 338.210947] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.211503] ? __virt_addr_valid+0x2e8/0x5d0 [ 338.211963] ? __pfx_lock_release+0x10/0x10 [ 338.212400] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 338.212999] ? find_held_lock+0x2c/0x110 [ 338.213429] ? srso_return_thunk+0x5/0x5f [ 338.213853] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 338.214373] ? srso_return_thunk+0x5/0x5f [ 338.214809] ? lock_release+0x20f/0x6f0 [ 338.215219] ? __pfx_lock_release+0x10/0x10 [ 338.215651] ? srso_return_thunk+0x5/0x5f [ 338.216081] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.216604] ? srso_return_thunk+0x5/0x5f [ 338.217044] unregister_netdevice_queue+0x224/0x2e0 [ 338.217546] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 338.218109] ? up_write+0x195/0x520 [ 338.218497] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.218995] ? srso_return_thunk+0x5/0x5f [ 338.219427] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.219922] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 338.220450] ? srso_return_thunk+0x5/0x5f [ 338.220873] ? srso_return_thunk+0x5/0x5f [ 338.221297] ? synchronize_rcu+0x1ff/0x260 [ 338.221712] ieee80211_unregister_hw+0x55/0x3a0 [ 338.222176] hwsim_exit_net+0x3a0/0x730 [ 338.222570] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.223012] ? srso_return_thunk+0x5/0x5f [ 338.223439] ? netdev_run_todo+0x788/0x1040 [ 338.223876] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.224324] ops_exit_list+0xb3/0x180 [ 338.224720] cleanup_net+0x546/0xad0 [ 338.225116] ? __pfx_cleanup_net+0x10/0x10 [ 338.225548] process_one_work+0x8ee/0x1a10 [ 338.226010] ? __pfx_lock_acquire+0x10/0x10 [ 338.226442] ? __pfx_process_one_work+0x10/0x10 [ 338.226919] ? srso_return_thunk+0x5/0x5f [ 338.227351] ? move_linked_works+0x172/0x270 [ 338.227785] ? srso_return_thunk+0x5/0x5f [ 338.228213] ? assign_work+0x196/0x240 [ 338.228620] worker_thread+0x674/0xe70 [ 338.229030] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.229551] ? __pfx_worker_thread+0x10/0x10 [ 338.230009] kthread+0x3ab/0x720 [ 338.230367] ? __pfx_kthread+0x10/0x10 [ 338.230771] ? srso_return_thunk+0x5/0x5f [ 338.231202] ? finish_task_switch.isra.0+0x206/0x840 [ 338.231706] ? __pfx_kthread+0x10/0x10 [ 338.232122] ret_from_fork+0x48/0x80 [ 338.232493] ? __pfx_kthread+0x10/0x10 [ 338.232904] ret_from_fork_asm+0x1a/0x30 [ 338.233338] [ 340.014097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.014366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.015104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.015847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.017637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.018879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.019261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.020011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.021120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.029964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.032867] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.034684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.206079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.206810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.207381] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.211272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.214877] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.215494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.219658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.238058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.240289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.245804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.250172] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.253246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.284936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.290543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.303954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.309466] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.318087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.318543] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.328170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.329011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.369768] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.370071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.370297] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.375270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.381348] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.384015] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.385730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.388257] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.390481] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.392539] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.428869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.436395] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.441054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.464045] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.519965] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.522941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.049645] Bluetooth: hci0: command tx timeout [ 342.050668] Bluetooth: hci1: command tx timeout [ 342.243698] Bluetooth: hci2: command tx timeout [ 342.306594] Bluetooth: hci3: command tx timeout [ 342.498727] Bluetooth: hci4: command tx timeout [ 342.563603] Bluetooth: hci6: command tx timeout [ 342.627620] Bluetooth: hci5: command tx timeout [ 342.627694] Bluetooth: hci7: command tx timeout [ 344.098762] Bluetooth: hci1: command tx timeout [ 344.099179] Bluetooth: hci0: command tx timeout [ 344.289699] Bluetooth: hci2: command tx timeout [ 344.354755] Bluetooth: hci3: command tx timeout [ 344.546921] Bluetooth: hci4: command tx timeout [ 344.609703] Bluetooth: hci6: command tx timeout [ 344.673952] Bluetooth: hci7: command tx timeout [ 344.673963] Bluetooth: hci5: command tx timeout [ 346.145720] Bluetooth: hci0: command tx timeout [ 346.145832] Bluetooth: hci1: command tx timeout [ 346.337722] Bluetooth: hci2: command tx timeout [ 346.402623] Bluetooth: hci3: command tx timeout [ 346.593671] Bluetooth: hci4: command tx timeout [ 346.658455] Bluetooth: hci6: command tx timeout [ 346.722620] Bluetooth: hci7: command tx timeout [ 346.722664] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 01:36:00 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eba5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000020 R11=2f72656b726f776b R12=0000000000000020 R13=0000000000000001 R14=ffff888008fea029 R15=ffff8880095deeb8 RIP=ffffffff8283ebfd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faa9fd82d70 CR3=000000000ee54000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=0000ff00ff0101010000000700000001 XMM06=00007f32de56006563697665642e3569 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8e9d7 RDX=ffffed100d9e6c4b RSI=0000000000000004 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffff8880096a7e68 R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=00000000bd08a39e R12=ffffffff864057d0 R13=1ffff110012d4fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faa9fe23488 CR3=000000000e66c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003fd9213cec91fc2e XMM02=00000000000000004139b99800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000