Warning: Permanently added '[localhost]:64144' (ECDSA) to the list of known hosts. 2025/11/15 23:19:41 fuzzer started 2025/11/15 23:19:42 dialing manager at localhost:37161 syzkaller login: [ 52.026290] cgroup: Unknown subsys name 'net' [ 52.087454] cgroup: Unknown subsys name 'cpuset' [ 52.102246] cgroup: Unknown subsys name 'rlimit' 2025/11/15 23:19:52 syscalls: 210 2025/11/15 23:19:52 code coverage: enabled 2025/11/15 23:19:52 comparison tracing: enabled 2025/11/15 23:19:52 extra coverage: enabled 2025/11/15 23:19:52 setuid sandbox: enabled 2025/11/15 23:19:52 namespace sandbox: enabled 2025/11/15 23:19:52 Android sandbox: enabled 2025/11/15 23:19:52 fault injection: enabled 2025/11/15 23:19:52 leak checking: enabled 2025/11/15 23:19:52 net packet injection: enabled 2025/11/15 23:19:52 net device setup: enabled 2025/11/15 23:19:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/15 23:19:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/15 23:19:52 USB emulation: enabled 2025/11/15 23:19:52 hci packet injection: enabled 2025/11/15 23:19:52 wifi device emulation: enabled 2025/11/15 23:19:52 802.15.4 emulation: enabled 2025/11/15 23:19:52 fetching corpus: 0, signal 0/0 (executing program) 2025/11/15 23:19:54 starting 8 fuzzer processes 23:19:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x19c, 0x200100) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x5) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000000c0)=0xd5) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"89803c0b657d9093b3be16edec3efcd6", 0x0, 0x0, {0x17ca335f, 0x80000000}, {0x1, 0x7}, 0xffffffff, [0x697e, 0x20, 0x6, 0x9, 0x8, 0x6, 0x80010000, 0xfffffffffffff001, 0x759, 0x4, 0x80000000, 0x2, 0x0, 0x3b, 0xffff, 0xc1d]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000480)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x50000, 0x0) ioctl$CDROMREADAUDIO(r4, 0x530e, &(0x7f0000000540)={@lba=0xab9, 0x3, 0x6, &(0x7f0000000500)=""/6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x3c}}, 0x801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r6, &(0x7f00000006c0)={0x67446698, 0x1, 0x3, 0x3, 0x4, "31bcffc3741c2bbb55aad9efa4867789d45fbe612c7045e7ec896c0f47cf4da114df5dbe6c3de8e7bbe29654153cc3f4a813ea1d72320fc27417eaeb500fac0b8f63975858e46aaf4a1a24d49a7abad6ffd5cd5c2d0506b54f4b40285626b5d962b8c24512f0236076b464ee56f64bca43c329871b7ea0dd3b3be8b13f63dc3a0c0dd1b0a42600fd701f5000a63f7f4f6bd54f4580a139e4bfc1a8cae6564c50d41f9295a936585ab665a5df237caad6a43e7c6bfa0346baba2e1ba91fdb91b5660b5c575846aa14a32dda6c96a41f4a7d74005f6887edad6a8766404a0bdde8938b3e9dcc4c3abf48f6cb"}, 0xfb) ioctl$TCSBRKP(r1, 0x5425, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x410, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000940)=0xfffffff9) 23:19:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4000000) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x588}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc2330000}]}, 0x54}}, 0x20000000) socketpair(0x9, 0x80000, 0xfb, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x60}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40}, 0x4040058) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x20048080) r4 = syz_open_dev$sg(&(0x7f00000007c0), 0x6, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000800)={{0x0, 0x9, 0x8, 0x1, 0x8ed, 0x4, 0x800, 0x4, 0x2, 0x3, 0x0, 0x5, 0x9, 0x3ff, 0x7fff}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001800)={{r5, 0x8000, 0x100000001, 0x10000, 0x10000, 0x3, 0x7fff, 0x0, 0x7ff, 0x4, 0x20, 0xffffffff, 0x2, 0xe9, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001900), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xff, 0x400, 0x6, 0xffff0001]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xaa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008010}, 0x4001) syz_genetlink_get_family_id$SEG6(&(0x7f0000001a00), r1) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000001a40)=0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) 23:19:54 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2c000, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x1, 0x1f, 0x4, 0x101, 0x0, "80bf6273127946fdaeffd19487c78850098798", 0x4, 0x7ff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"2234776df2db3e84b09bd6141dafa6a8", 0x0, 0x0, {0x9, 0x1ff}, {0x12c00000, 0x7}, 0x9, [0x80000001, 0x0, 0xff, 0x7, 0x3, 0x100000000, 0x3, 0xffffffffffffffff, 0x10000000000, 0x4, 0x5, 0x401, 0x3f, 0x2, 0x800, 0x2]}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000300)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000340)=0xffff) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000380), 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x842, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000600)) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x200001, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000780)={0x1926, 0x2d, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) 23:19:54 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001140)={0x53, 0xfffffffffffffffc, 0x1000, 0x5, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/90, 0x5a}]}, &(0x7f00000000c0)="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", &(0x7f00000010c0), 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000001100)}) r0 = syz_open_dev$sg(&(0x7f00000011c0), 0x6a7, 0x100) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000080) r2 = syz_open_dev$sg(&(0x7f0000001340), 0x3, 0x18000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000001380)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000013c0)=0x8001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc00000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40014) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xec, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdbf}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xaa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001840), 0x5, 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000001880)=0x9) r7 = syz_open_dev$sg(&(0x7f00000018c0), 0x7, 0x70640) ioctl$SG_GET_VERSION_NUM(r7, 0x2282, &(0x7f0000001900)) 23:19:54 executing program 2: rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1f, 0x8}, 0x1}, 0x20, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x24008001) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x80000001, 0x1}}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3, 0xb44, 0x7f}, 0x4}, 0x20, 0x1, 0x0) rseq(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5, 0xba3, 0x0, 0x3}}, 0x20, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000340)={0xa80, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x400, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x1, 0x1ff, 0x4, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x20, 0xc, 0x5, 0xb, 0xb, 0xc, 0x60, 0x3, 0x7d, 0x1, 0x6, 0x1, 0x63, 0x16, 0x3, 0x2, 0x6c, 0x12, 0xb, 0x2, 0x0, 0x30, 0x1b, 0x6, 0x0, 0x12, 0x4c, 0x9, 0xc, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x18, 0x2, 0x7fff, 0x4d, 0x297, 0xb22d, 0x1, 0xebe]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x78, 0x1b, 0x1, 0x36, 0xd, 0x6, 0x16, 0x4, 0x30, 0x30, 0x18, 0x16, 0x6c, 0x4, 0xc, 0x4, 0x3, 0x12, 0x6c, 0x4, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0x0, 0x8, 0x9, 0x7, 0x0, 0x4bb]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x8}, {0x3, 0xa}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x2, 0x6}, {0x6, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x30, 0x30, 0xc, 0x24]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x1, 0x6f, 0x36, 0x24, 0xd, 0x18, 0x6c, 0x2, 0xc, 0x18, 0x61, 0x16, 0x16, 0x48, 0x12, 0x16, 0x1b, 0x30, 0x16, 0x173cf7e4c0f4114e]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x3}, {0x5, 0x6}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x2}, {0x7, 0x8}, {0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x2}, {0x4, 0x7}, {0x4, 0x8}, {0x4, 0x4}, {0x0, 0x1}, {0x1}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0x2}, {0x1}, {0x7, 0x2}, {0x4, 0x2}, {}, {0x7, 0x8}, {0x5, 0x3}, {0x7, 0x3}, {0x5, 0x6}, {0x2, 0x3}, {0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x8}, {0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x7}, {0x7, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x60, 0x48, 0x1b, 0x5, 0x6c, 0xb, 0xc, 0x16, 0x1, 0x18, 0x1, 0x2, 0x1f, 0xb, 0x60, 0xc, 0xd07cc8f1f880625, 0x0, 0x2, 0x16, 0xb, 0x24, 0x30, 0x9, 0x6c, 0x16, 0x2, 0x6, 0x9, 0x48, 0x5]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x8}, {0x5, 0x5}, {0x6, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x6}, {0x7}, {0x7, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x0, 0x7}, {0x4, 0x2}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x56, 0x8, 0xb7f1, 0x3, 0x5, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x3, 0x3, 0x2, 0x9, 0x3, 0x5, 0x3, 0x0, 0x36, 0x24, 0x4, 0x1, 0x4, 0xb, 0x3f, 0x36, 0x48]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x9}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x2}, {0x6, 0x1}, {0x3, 0x9}, {0x6, 0x1}, {0x5}, {0x5, 0x3}, {0x7, 0x4}, {0x5}, {0x7, 0x7}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0xa}, {0x6, 0x2}, {0x4, 0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x12, 0x1b, 0x6, 0xc, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x3, 0x1}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x4, 0x5}, {0x6, 0x7}, {0x1, 0x5}, {0x4, 0x4}, {0x3, 0xa}, {0x2, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x7, 0x6}, {0x7, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x2}, {0x2, 0x4}, {0x5, 0x8}, {0x7, 0x8}, {0x3}, {0x6, 0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x7}, {0x6}, {0x7, 0x4}, {0x7, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8931, 0x80, 0x7f, 0x8, 0x7f, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x0, 0x1, 0x0, 0x7fff, 0x400, 0x40]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x24]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x30, 0x16, 0x48, 0xb, 0x1, 0x1, 0x0, 0x48, 0x3, 0xc, 0x5, 0x3, 0x60, 0x9, 0x4, 0x1, 0x24, 0x30, 0x48, 0x9]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x6}, {0x4, 0x2}, {0x7, 0x8}, {0x5}, {0x1, 0x2}, {0x5, 0x2}, {0x7, 0xa}, {0x0, 0xa}, {0x3, 0x3}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8001, 0x1, 0x9, 0x3ff, 0x1, 0xffff, 0x9]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x6, 0xa}, {0x2, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x7}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x6, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x5}, {0x3, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x9}, {0x5, 0x1}, {0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x7, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x9}, {0x7, 0x4}, {0x2, 0x8}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x6}, {0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x12, 0x6c, 0x6c, 0x18, 0xb, 0x16, 0x16, 0x3, 0x18, 0x5, 0x5, 0xb, 0xb, 0x36, 0x1, 0x9, 0x6, 0x1b, 0x36]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x36, 0x48]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x0, 0x71, 0x2, 0x0, 0xffff, 0x18]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x6c, 0x12, 0x24, 0x5, 0xb, 0x9, 0x5a, 0x0, 0xb, 0x48, 0x24, 0x24, 0x24]}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x32, 0x12, 0x2, 0x60, 0xb, 0x3, 0x48, 0xb, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x1, 0x6c, 0xb, 0x1b, 0x48, 0x3, 0x16, 0x1, 0x2, 0x3, 0x60, 0x9, 0x5, 0x6c, 0x9, 0x60, 0x30, 0x3, 0x30, 0x4, 0x3, 0x30, 0x77, 0x41, 0x6, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x4}, {0x6, 0xa}, {0x2, 0xa}, {0x7, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x4}, {0x6, 0xa}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x2}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x7}, {0x6, 0x4}, {0x5}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {}, {0x0, 0x1}, {0x3, 0x8}, {0x6}, {0x4, 0x9}, {0x6}, {0x1}, {0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x5, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x5}, {}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x4}, {0x6, 0x6}, {0x2, 0x4}, {0x4, 0x2}, {0x3, 0x6}, {0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0x8}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x4}, {0x4, 0x11}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x8}, {0x2, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x2dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8000, 0x76a, 0xc079, 0xfff, 0x7, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x20, 0x7, 0x0, 0x8, 0xff91, 0x4]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x4}, {0x0, 0x8}, {0x6, 0x3}, {0x7, 0x3}, {0x3, 0x5}, {0x3, 0x4}, {0x5, 0x7}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x4}, {0x5, 0x1}, {0x6, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x3, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x5}, {0x4, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x6}, {0x6, 0x6}, {0x2, 0x7}, {0x5, 0x4}, {0x6, 0x2}, {0x5}, {0x2, 0x8}, {0x0, 0x6}, {0x5, 0xa}]}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x1, 0x1, 0x9, 0xff, 0x2, 0x1f]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x6}, {0x7, 0x4}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x2}, {0x1, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x9}, {0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x6}, {0x4, 0x9}, {0x3, 0x5}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x5}, {0x4, 0x5}, {0x6, 0x7}, {0x2}, {0x6, 0x4}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x6, 0x1}, {0x2, 0x4}, {0x5, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x6, 0xa}, {0x7}, {0x5, 0x6}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x3}, {0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x5, 0x8}, {0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0x9}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x7}, {0x6, 0xa}, {0x0, 0x3}, {0x2}, {0x5, 0x9}, {}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0xa}, {0x0, 0xa}, {0x4, 0x5}, {0x6, 0xa}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc0b, 0x80, 0x2, 0x3, 0xfb45, 0xb24, 0x8001, 0x655d]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0x4}, {0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x3, 0x5}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcc5c, 0x8, 0x81, 0x1ff, 0x4, 0x7, 0x8, 0x8001]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x82fe, 0x401, 0x9, 0x0, 0x7, 0xffff]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x8}, {0x3, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x8}, {0x1, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0x3}, {0x7, 0xa}, {0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x8}, {}, {0x2, 0x3}, {0x5, 0x3}, {0x3, 0x7}, {0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x1}, {0x0, 0x3}, {0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x5}, {0x6, 0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x4}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfff, 0x1, 0x5, 0x14, 0x7, 0x95, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x3, 0x1, 0x1c, 0xb, 0x48, 0xc, 0x48, 0x12, 0x24, 0x16, 0xb, 0x24, 0xc, 0x12, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x0, 0x7ff, 0x2, 0x3, 0x1000, 0x1000, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0x60, 0x9, 0x5, 0x892b79a1d6f7c2c2, 0x12, 0x52, 0x4, 0x3, 0x0, 0x60, 0x4, 0x1b, 0x9, 0x36, 0x5, 0x24, 0x1, 0x2, 0x2, 0x4, 0x3, 0x18, 0x1, 0x0, 0x4, 0x12, 0x5, 0x1, 0x16, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x28c, 0x9, 0x1, 0x1, 0x3ff, 0x3f, 0x40, 0x7]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x5, 0x6c, 0x62, 0x12, 0x5, 0x12, 0x3, 0x6, 0x16, 0x1]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x0, 0x8, 0x9, 0xb925, 0x7, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec, 0xfa, 0x3, 0x2, 0xd43c, 0xc6, 0x0, 0x100]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x5}, {0x0, 0xa}, {0x4, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x4, 0x1}, {0x4, 0x6}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0xa}, {0x2, 0x3}, {0x3, 0x3}, {0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x1}, {0x3, 0x2}, {0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0xa}, {0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x1}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0x6}, {0x2, 0x6}, {0x3}, {0x5, 0xa}, {0x1}, {0x7, 0xa}, {0x6, 0x1}, {0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {0x2}, {0x2, 0xa}, {0x7, 0x4}, {0x6, 0x8}, {0x5, 0x4}, {0x3, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3}, {0x5, 0x3}, {0x2, 0x6}, {0x6, 0x1}, {0x2}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x1}, {0x2, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x18, 0x18, 0x6, 0x6, 0x9, 0x19, 0x24, 0x6, 0x16, 0x24, 0x48, 0xb, 0x16, 0x2, 0x48, 0x36, 0x4]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9, 0x8, 0x5, 0x80, 0x5e1b, 0x3, 0xda89]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x1}, {0x2, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x5, 0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x6}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x80, 0x1c, 0x505, 0x401, 0x1, 0x7, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x2, 0x1b, 0x6, 0x1b, 0x1]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x0, 0x3ff, 0x9, 0x0, 0x9, 0x9f, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0xc, 0xe, 0x18, 0xc, 0x3, 0x9, 0xb, 0x6c, 0x1, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x2d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0xa}, {0x6, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x3, 0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0x5}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0xa}, {0x5, 0x7}, {0x6}, {0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0x4}, {0x6, 0x6}, {0x5, 0x6}, {0x5, 0x2}, {0x3, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0x4}, {0x5, 0x6}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x7, 0xa}, {0x4, 0x4}, {0x6, 0x9}, {0x7, 0xa}, {0x3}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x1}, {0x2, 0x8}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x12, 0x3, 0x48, 0x9, 0x4, 0x16, 0x7d, 0x6c, 0x2, 0x24, 0x30, 0x5, 0x6c, 0x6, 0x48, 0x36, 0x60, 0x9, 0x24, 0x36, 0x4, 0x16, 0x2, 0x30, 0x1b, 0x5, 0x1b, 0x1b, 0xc, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2}, {0x0, 0x3}, {0x4}, {0x4, 0x3}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x0, 0x8}, {0x3, 0x6}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x7}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0xd}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x7}, {0x6}, {0x2, 0x3}, {0x4, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x7}, {0x4, 0x9}, {0x4}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x9}, {0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x4}, {0x4}, {0x5, 0x9}, {0x1, 0x5}, {}, {}, {0x1, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1}, {0x2, 0x6}, {0x7, 0x8}, {0x2, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x9}, {0x2}, {0x5, 0x7}, {0x3, 0x5}, {}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x2}, {0x6, 0x8}, {0x5}, {0x2, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x12, 0xb, 0x18, 0x1b, 0x9, 0x6, 0x4, 0x18, 0x24, 0x16, 0xc, 0x16, 0x2, 0x1b, 0x30, 0x30, 0x1b, 0x6c, 0x6, 0x3, 0x30, 0x18, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x1ba, 0x3, 0x5, 0x9, 0x8001, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x3, 0x3, 0x5, 0x20, 0x9, 0xa547]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x16, 0x1, 0x60, 0x30, 0x6c, 0x2, 0x724f86508dbe05d5, 0x3, 0x18, 0x5, 0x2, 0xb, 0x0, 0x2, 0x60, 0xb, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2c4, 0xf656, 0xfe01, 0x0, 0x20, 0x6, 0xce]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x7, 0x4b4, 0x1, 0x6, 0x400, 0x2, 0x800]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x4}, {0x3, 0x4}, {0x5}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x9}, {0x2, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x4}, {0x7, 0x4}, {0x2, 0x3}, {0x3, 0x7}, {0x4, 0xa}, {}, {0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x7, 0x3}, {0x3, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x4, 0x9}, {0x7, 0x8}, {0x6}, {0x6, 0x3}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x6}, {0x6}, {0x5, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0xa}, {0x6, 0x8}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0x9}, {0x2, 0x4}, {0x2, 0xa}, {0x3, 0x1}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x7}, {}, {0x5, 0x2}, {0x5, 0x1}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x9}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ee, 0x20, 0x7, 0xfffa, 0x7, 0x400, 0xfff9, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x400, 0xff, 0x1ff, 0xfff, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x126, 0x5, 0x7b3a, 0x1d, 0x5, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x2, 0x0, 0x40, 0x2, 0x4, 0x1, 0x8000]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x2}, {0x0, 0x9}, {0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x7, 0x1}, {0x6, 0x5}, {0x2, 0x2}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x0, 0x5, 0xffc0, 0x6, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x24, 0x12, 0x30, 0x36, 0x36, 0x60, 0x48, 0xc, 0x9, 0x9, 0x9, 0x24, 0x9, 0xc, 0x2]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x2}, {0x3, 0x9}, {0x1, 0x9}, {0x7, 0x1}, {0x6, 0x3}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x2}, {0x0, 0xa}, {0x2}, {0x3, 0x3}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x1}, {0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0xa}]}]}]}]}, 0xa80}, 0x1, 0x0, 0x0, 0x40001}, 0x4000011) rseq(&(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x4, 0x593e, 0x1}, 0x4}, 0x20, 0x1, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, r1, 0xe1bd7f071ad7af2e, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000), 0x80000, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000001040)={0x400, 0x0, 0x6}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r2) pkey_free(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r2) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x794145a5386a354f) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001300)={&(0x7f0000001200), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 23:19:54 executing program 6: timer_create(0x7, &(0x7f0000000000)={0x0, 0x19, 0x1}, &(0x7f0000000040)) ptrace$setopts(0x4200, 0xffffffffffffffff, 0x7ff, 0x6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x40) ptrace$getregs(0xe, r0, 0xffffffffffffffff, &(0x7f0000000200)=""/125) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x20500, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) timer_create(0x5, &(0x7f0000000300)={0x0, 0x15, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000340)=0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) timer_gettime(r3, &(0x7f00000003c0)) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000440)) ptrace$setopts(0x4200, r2, 0x10001, 0x10) sched_rr_get_interval(r2, &(0x7f0000000480)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000600)=0x8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000640)=0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0xf, 0x4, @tid=r6}, &(0x7f00000006c0)) [ 62.920634] audit: type=1400 audit(1763248794.321:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:19:54 executing program 4: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x602, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f00000000c0)={0xa3, 0x44}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c001) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x202100, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000280)=0x101) prctl$PR_GET_SECUREBITS(0x1b) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xef8e, 0x280) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x3ff, 0x1, 0x8, 0xbbfb, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x20000804) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3558cd8e}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x98}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40014}, 0x40010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x20, 0x9f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 23:19:54 executing program 7: sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4000000}, 0x20000401) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x0, 0x20, 0xfff, 0x37e4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x5, 0x6eccb1c3]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x37cd, 0xc8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xac81}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}]}, 0x78}}, 0x4000000) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xfffffc01, 0x6, 0x5, 0x7f]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40095}, 0x51) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x7, 0x73f6bdd7, 0x8e]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x8014) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8005) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xb48500}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x21}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x300000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x2b, 0xa, 0x9, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xae00}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x24000010) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xf1fd01e593504fac) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x5) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044091}, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000d00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001d00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "2960d4634b7526"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000006dd40)={0x7ff, [{r6}, {0x0, r7}, {}, {r8}], 0x5, "918f335d6a8a06"}) [ 64.134465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.138968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.140970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.145225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.149327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.151461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.153856] ================================================================== [ 64.155228] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 64.156470] Read of size 2 at addr ffff88800c119538 by task kworker/u11:3/294 [ 64.163413] [ 64.163748] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:3 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 64.163782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.163799] Workqueue: hci1 hci_cmd_work [ 64.163833] Call Trace: [ 64.163842] [ 64.163852] dump_stack_lvl+0xca/0x120 [ 64.163887] print_report+0xcb/0x610 [ 64.163934] ? __virt_addr_valid+0x100/0x5d0 [ 64.163969] ? hci_cmd_work+0x66d/0x6d0 [ 64.164001] ? hci_cmd_work+0x66d/0x6d0 [ 64.164032] kasan_report+0xca/0x100 [ 64.164063] ? hci_cmd_work+0x66d/0x6d0 [ 64.164098] hci_cmd_work+0x66d/0x6d0 [ 64.164131] process_one_work+0x8e1/0x19c0 [ 64.164173] ? __pfx_process_one_work+0x10/0x10 [ 64.164209] ? move_linked_works+0x172/0x270 [ 64.164236] ? assign_work+0x196/0x240 [ 64.164271] worker_thread+0x67e/0xe90 [ 64.164308] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 64.164340] ? __pfx_worker_thread+0x10/0x10 [ 64.164375] kthread+0x3c8/0x740 [ 64.164407] ? __pfx_kthread+0x10/0x10 [ 64.164437] ? ret_from_fork+0x79/0x7a0 [ 64.164462] ? lock_release+0xc8/0x290 [ 64.164499] ? __pfx_kthread+0x10/0x10 [ 64.164531] ret_from_fork+0x67a/0x7a0 [ 64.164555] ? __pfx_ret_from_fork+0x10/0x10 [ 64.164581] ? __switch_to+0x759/0x1060 [ 64.164615] ? __pfx_kthread+0x10/0x10 [ 64.164646] ret_from_fork_asm+0x1a/0x30 [ 64.164687] [ 64.164695] [ 64.188340] Allocated by task 289: [ 64.188992] kasan_save_stack+0x24/0x50 [ 64.189718] kasan_save_track+0x14/0x30 [ 64.190463] __kasan_slab_alloc+0x59/0x70 [ 64.191263] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 64.192208] __alloc_skb+0x2ab/0x370 [ 64.192914] hci_cmd_sync_alloc+0x34/0x300 [ 64.193701] __hci_cmd_sync_sk+0xf7/0x5c0 [ 64.194480] hci_read_dev_class_sync+0x2c/0x170 [ 64.195378] hci_dev_open_sync+0x1874/0x1f60 [ 64.196195] hci_power_on+0xdb/0x5d0 [ 64.196771] process_one_work+0x8e1/0x19c0 [ 64.197419] worker_thread+0x67e/0xe90 [ 64.198024] kthread+0x3c8/0x740 [ 64.198537] ret_from_fork+0x67a/0x7a0 [ 64.199142] ret_from_fork_asm+0x1a/0x30 [ 64.199781] [ 64.200056] Freed by task 290: [ 64.200535] kasan_save_stack+0x24/0x50 [ 64.201153] kasan_save_track+0x14/0x30 [ 64.201757] kasan_save_free_info+0x3a/0x60 [ 64.202439] __kasan_slab_free+0x43/0x70 [ 64.203083] kmem_cache_free+0x26f/0x500 [ 64.203726] kfree_skbmem+0x18a/0x1f0 [ 64.204313] sk_skb_reason_drop+0x10e/0x1b0 [ 64.204970] vhci_read+0x3d5/0x5d0 [ 64.205506] vfs_read+0x1eb/0xc70 [ 64.206062] ksys_read+0x121/0x240 [ 64.206604] do_syscall_64+0xbf/0x430 [ 64.207232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.208021] [ 64.208298] The buggy address belongs to the object at ffff88800c119500 [ 64.208298] which belongs to the cache skbuff_head_cache of size 232 [ 64.210196] The buggy address is located 56 bytes inside of [ 64.210196] freed 232-byte region [ffff88800c119500, ffff88800c1195e8) [ 64.211981] [ 64.212239] The buggy address belongs to the physical page: [ 64.213065] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xc119 [ 64.214220] memcg:ffff888009a15181 [ 64.214738] anon flags: 0x100000000000000(node=0|zone=1) [ 64.215588] page_type: f5(slab) [ 64.216113] raw: 0100000000000000 ffff8880096c78c0 ffffea00003639c0 dead000000000003 [ 64.217264] raw: 0000000000000000 00000000800c000c 00000000f5000000 ffff888009a15181 [ 64.218397] page dumped because: kasan: bad access detected [ 64.219266] [ 64.219528] Memory state around the buggy address: [ 64.220259] ffff88800c119400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.221330] ffff88800c119480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 64.222412] >ffff88800c119500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.223495] ^ [ 64.224262] ffff88800c119580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 64.225329] ffff88800c119600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 64.226411] ================================================================== [ 64.227718] Disabling lock debugging due to kernel taint [ 64.230858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.246269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.248158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.249517] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.252368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.255999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.257460] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.260164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.261932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.263085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.289966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.289980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.294945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.304825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.323115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.323852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.326848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.326897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.329638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.331147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.334449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.336976] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.338216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.342649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.388633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.415924] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.418184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.429951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.441968] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.446074] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.447290] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.458654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.507834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.510080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.282951] Bluetooth: hci1: command tx timeout [ 66.346976] Bluetooth: hci3: command tx timeout [ 66.347052] Bluetooth: hci2: command tx timeout [ 66.347705] Bluetooth: hci0: command tx timeout [ 66.410958] Bluetooth: hci5: command tx timeout [ 66.410986] Bluetooth: hci4: command tx timeout [ 66.475634] Bluetooth: hci6: command tx timeout [ 66.603516] Bluetooth: hci7: command tx timeout [ 68.331821] Bluetooth: hci1: command tx timeout [ 68.395044] Bluetooth: hci2: command tx timeout [ 68.395475] Bluetooth: hci3: command tx timeout [ 68.395983] Bluetooth: hci0: command tx timeout [ 68.458923] Bluetooth: hci4: command tx timeout [ 68.459462] Bluetooth: hci5: command tx timeout [ 68.522844] Bluetooth: hci6: command tx timeout [ 68.651470] Bluetooth: hci7: command tx timeout [ 70.378808] Bluetooth: hci1: command tx timeout [ 70.443803] Bluetooth: hci2: command tx timeout [ 70.444266] Bluetooth: hci0: command tx timeout [ 70.444684] Bluetooth: hci3: command tx timeout [ 70.506825] Bluetooth: hci5: command tx timeout [ 70.506969] Bluetooth: hci4: command tx timeout [ 70.570808] Bluetooth: hci6: command tx timeout [ 70.698885] Bluetooth: hci7: command tx timeout [ 72.426813] Bluetooth: hci1: command tx timeout [ 72.490839] Bluetooth: hci3: command tx timeout [ 72.491289] Bluetooth: hci0: command tx timeout [ 72.491667] Bluetooth: hci2: command tx timeout [ 72.554788] Bluetooth: hci4: command tx timeout [ 72.555347] Bluetooth: hci5: command tx timeout [ 72.618839] Bluetooth: hci6: command tx timeout [ 72.747981] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:19:55 Registers: info registers vcpu 0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801722f618 R8 =0000000000000000 R9 =ffffed1001460046 R10=000000000000006b R11=6330303838386652 R12=000000000000006b R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f14978933f8 CR3=000000000b659000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f410a4bb7c000007f410a4bb7c8 XMM02=00007f410a4bb7e000007f410a4bb7c0 XMM03=00007f410a4bb7c800007f410a4bb7c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3e9e0 RCX=ffffffff8169b13c RDX=ffff88800f303780 RSI=ffffffff8169b116 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888015a276e8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=1ffff1100d9e6c41 R12=ffffed100d9c7d3d R13=ffff88806ce3e9e8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8169b118 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0055fd08c0 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0056438590 CR3=000000000e27f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fcabc2937c000007fcabc2937c8 XMM02=00007fcabc2937e000007fcabc2937c0 XMM03=00007fcabc2937c800007fcabc2937c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000