Warning: Permanently added '[localhost]:7107' (ECDSA) to the list of known hosts. 2024/11/12 20:55:03 fuzzer started 2024/11/12 20:55:04 dialing manager at localhost:46317 syzkaller login: [ 63.505158] cgroup: Unknown subsys name 'net' [ 63.572587] cgroup: Unknown subsys name 'cpuset' [ 63.590458] cgroup: Unknown subsys name 'rlimit' 2024/11/12 20:55:20 syscalls: 2217 2024/11/12 20:55:20 code coverage: enabled 2024/11/12 20:55:20 comparison tracing: enabled 2024/11/12 20:55:20 extra coverage: enabled 2024/11/12 20:55:20 setuid sandbox: enabled 2024/11/12 20:55:20 namespace sandbox: enabled 2024/11/12 20:55:20 Android sandbox: enabled 2024/11/12 20:55:20 fault injection: enabled 2024/11/12 20:55:20 leak checking: enabled 2024/11/12 20:55:20 net packet injection: enabled 2024/11/12 20:55:20 net device setup: enabled 2024/11/12 20:55:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/12 20:55:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/12 20:55:20 USB emulation: enabled 2024/11/12 20:55:20 hci packet injection: enabled 2024/11/12 20:55:20 wifi device emulation: enabled 2024/11/12 20:55:20 802.15.4 emulation: enabled 2024/11/12 20:55:21 fetching corpus: 50, signal 19461/21258 (executing program) 2024/11/12 20:55:21 fetching corpus: 100, signal 31091/34497 (executing program) 2024/11/12 20:55:21 fetching corpus: 150, signal 36989/41903 (executing program) 2024/11/12 20:55:21 fetching corpus: 200, signal 42104/48442 (executing program) 2024/11/12 20:55:22 fetching corpus: 250, signal 48665/56284 (executing program) 2024/11/12 20:55:22 fetching corpus: 300, signal 54685/63458 (executing program) 2024/11/12 20:55:23 fetching corpus: 350, signal 59086/68992 (executing program) 2024/11/12 20:55:23 fetching corpus: 400, signal 61419/72544 (executing program) 2024/11/12 20:55:23 fetching corpus: 450, signal 65139/77366 (executing program) 2024/11/12 20:55:23 fetching corpus: 500, signal 67743/81083 (executing program) 2024/11/12 20:55:23 fetching corpus: 550, signal 71170/85469 (executing program) 2024/11/12 20:55:23 fetching corpus: 600, signal 73255/88639 (executing program) 2024/11/12 20:55:24 fetching corpus: 650, signal 75317/91716 (executing program) 2024/11/12 20:55:24 fetching corpus: 700, signal 78991/96159 (executing program) 2024/11/12 20:55:24 fetching corpus: 750, signal 83649/101368 (executing program) 2024/11/12 20:55:24 fetching corpus: 800, signal 85048/103707 (executing program) 2024/11/12 20:55:24 fetching corpus: 850, signal 87460/106881 (executing program) 2024/11/12 20:55:24 fetching corpus: 900, signal 88719/109046 (executing program) 2024/11/12 20:55:24 fetching corpus: 950, signal 90178/111349 (executing program) 2024/11/12 20:55:25 fetching corpus: 1000, signal 91887/113795 (executing program) 2024/11/12 20:55:25 fetching corpus: 1050, signal 93828/116439 (executing program) 2024/11/12 20:55:25 fetching corpus: 1100, signal 94787/118307 (executing program) 2024/11/12 20:55:25 fetching corpus: 1150, signal 96007/120296 (executing program) 2024/11/12 20:55:25 fetching corpus: 1200, signal 97627/122611 (executing program) 2024/11/12 20:55:26 fetching corpus: 1250, signal 99771/125213 (executing program) 2024/11/12 20:55:26 fetching corpus: 1300, signal 101015/127185 (executing program) 2024/11/12 20:55:26 fetching corpus: 1350, signal 103051/129661 (executing program) 2024/11/12 20:55:26 fetching corpus: 1400, signal 104449/131655 (executing program) 2024/11/12 20:55:26 fetching corpus: 1450, signal 105540/133418 (executing program) 2024/11/12 20:55:27 fetching corpus: 1500, signal 106942/135356 (executing program) 2024/11/12 20:55:27 fetching corpus: 1550, signal 108199/137231 (executing program) 2024/11/12 20:55:27 fetching corpus: 1600, signal 109541/138998 (executing program) 2024/11/12 20:55:27 fetching corpus: 1650, signal 111481/141225 (executing program) 2024/11/12 20:55:28 fetching corpus: 1700, signal 112663/142923 (executing program) 2024/11/12 20:55:28 fetching corpus: 1750, signal 113324/144265 (executing program) 2024/11/12 20:55:28 fetching corpus: 1800, signal 113896/145513 (executing program) 2024/11/12 20:55:28 fetching corpus: 1850, signal 114920/147027 (executing program) 2024/11/12 20:55:29 fetching corpus: 1900, signal 116015/148594 (executing program) 2024/11/12 20:55:29 fetching corpus: 1950, signal 116984/150069 (executing program) 2024/11/12 20:55:29 fetching corpus: 2000, signal 117807/151402 (executing program) 2024/11/12 20:55:29 fetching corpus: 2050, signal 118468/152632 (executing program) 2024/11/12 20:55:30 fetching corpus: 2100, signal 118995/153785 (executing program) 2024/11/12 20:55:30 fetching corpus: 2150, signal 119533/154918 (executing program) 2024/11/12 20:55:30 fetching corpus: 2200, signal 120348/156226 (executing program) 2024/11/12 20:55:30 fetching corpus: 2250, signal 121472/157681 (executing program) 2024/11/12 20:55:31 fetching corpus: 2300, signal 122707/159131 (executing program) 2024/11/12 20:55:31 fetching corpus: 2350, signal 123629/160406 (executing program) 2024/11/12 20:55:31 fetching corpus: 2400, signal 124597/161749 (executing program) 2024/11/12 20:55:31 fetching corpus: 2450, signal 125987/163183 (executing program) 2024/11/12 20:55:32 fetching corpus: 2500, signal 126853/164430 (executing program) 2024/11/12 20:55:32 fetching corpus: 2550, signal 128019/165756 (executing program) 2024/11/12 20:55:32 fetching corpus: 2600, signal 129299/167154 (executing program) 2024/11/12 20:55:32 fetching corpus: 2650, signal 130055/168234 (executing program) 2024/11/12 20:55:33 fetching corpus: 2700, signal 131068/169428 (executing program) 2024/11/12 20:55:33 fetching corpus: 2750, signal 131959/170567 (executing program) 2024/11/12 20:55:33 fetching corpus: 2800, signal 132659/171556 (executing program) 2024/11/12 20:55:34 fetching corpus: 2850, signal 133197/172462 (executing program) 2024/11/12 20:55:34 fetching corpus: 2900, signal 134005/173447 (executing program) 2024/11/12 20:55:34 fetching corpus: 2950, signal 134702/174427 (executing program) 2024/11/12 20:55:35 fetching corpus: 3000, signal 135357/175405 (executing program) 2024/11/12 20:55:35 fetching corpus: 3050, signal 136065/176341 (executing program) 2024/11/12 20:55:35 fetching corpus: 3100, signal 136869/177290 (executing program) 2024/11/12 20:55:36 fetching corpus: 3150, signal 137299/178113 (executing program) 2024/11/12 20:55:36 fetching corpus: 3200, signal 138085/179060 (executing program) 2024/11/12 20:55:36 fetching corpus: 3250, signal 138723/179929 (executing program) 2024/11/12 20:55:37 fetching corpus: 3300, signal 139030/180680 (executing program) 2024/11/12 20:55:37 fetching corpus: 3350, signal 139692/181563 (executing program) 2024/11/12 20:55:37 fetching corpus: 3400, signal 140232/182379 (executing program) 2024/11/12 20:55:38 fetching corpus: 3450, signal 140862/183192 (executing program) 2024/11/12 20:55:38 fetching corpus: 3500, signal 141379/183940 (executing program) 2024/11/12 20:55:38 fetching corpus: 3550, signal 141844/184691 (executing program) 2024/11/12 20:55:38 fetching corpus: 3600, signal 142356/185443 (executing program) 2024/11/12 20:55:38 fetching corpus: 3650, signal 143542/186362 (executing program) 2024/11/12 20:55:38 fetching corpus: 3700, signal 144063/187106 (executing program) 2024/11/12 20:55:38 fetching corpus: 3750, signal 144581/187825 (executing program) 2024/11/12 20:55:38 fetching corpus: 3800, signal 144989/188492 (executing program) 2024/11/12 20:55:39 fetching corpus: 3850, signal 145369/189146 (executing program) 2024/11/12 20:55:39 fetching corpus: 3900, signal 145826/189819 (executing program) 2024/11/12 20:55:39 fetching corpus: 3950, signal 146323/190466 (executing program) 2024/11/12 20:55:39 fetching corpus: 4000, signal 146724/191140 (executing program) 2024/11/12 20:55:39 fetching corpus: 4050, signal 147225/191812 (executing program) 2024/11/12 20:55:39 fetching corpus: 4100, signal 147647/192452 (executing program) 2024/11/12 20:55:40 fetching corpus: 4150, signal 148063/193061 (executing program) 2024/11/12 20:55:40 fetching corpus: 4200, signal 148326/193678 (executing program) 2024/11/12 20:55:41 fetching corpus: 4250, signal 148698/194277 (executing program) 2024/11/12 20:55:41 fetching corpus: 4300, signal 149291/194937 (executing program) 2024/11/12 20:55:41 fetching corpus: 4350, signal 149614/195517 (executing program) 2024/11/12 20:55:41 fetching corpus: 4400, signal 150259/196115 (executing program) 2024/11/12 20:55:41 fetching corpus: 4450, signal 151061/196709 (executing program) 2024/11/12 20:55:41 fetching corpus: 4500, signal 151415/197305 (executing program) 2024/11/12 20:55:42 fetching corpus: 4550, signal 151779/197882 (executing program) 2024/11/12 20:55:42 fetching corpus: 4600, signal 152208/198426 (executing program) 2024/11/12 20:55:42 fetching corpus: 4650, signal 152602/198975 (executing program) 2024/11/12 20:55:42 fetching corpus: 4700, signal 153047/199491 (executing program) 2024/11/12 20:55:43 fetching corpus: 4750, signal 153578/200023 (executing program) 2024/11/12 20:55:43 fetching corpus: 4800, signal 154000/200516 (executing program) 2024/11/12 20:55:43 fetching corpus: 4850, signal 154586/201008 (executing program) 2024/11/12 20:55:43 fetching corpus: 4900, signal 154921/201520 (executing program) 2024/11/12 20:55:43 fetching corpus: 4950, signal 155271/202026 (executing program) 2024/11/12 20:55:43 fetching corpus: 5000, signal 155663/202508 (executing program) 2024/11/12 20:55:44 fetching corpus: 5050, signal 156150/202966 (executing program) 2024/11/12 20:55:44 fetching corpus: 5100, signal 156636/203219 (executing program) 2024/11/12 20:55:44 fetching corpus: 5150, signal 157133/203219 (executing program) 2024/11/12 20:55:44 fetching corpus: 5200, signal 157530/203219 (executing program) 2024/11/12 20:55:44 fetching corpus: 5250, signal 157855/203219 (executing program) 2024/11/12 20:55:44 fetching corpus: 5300, signal 158381/203219 (executing program) 2024/11/12 20:55:44 fetching corpus: 5350, signal 158824/203219 (executing program) 2024/11/12 20:55:44 fetching corpus: 5400, signal 159133/203223 (executing program) 2024/11/12 20:55:44 fetching corpus: 5450, signal 159531/203224 (executing program) 2024/11/12 20:55:45 fetching corpus: 5500, signal 159832/203224 (executing program) 2024/11/12 20:55:45 fetching corpus: 5550, signal 160316/203229 (executing program) 2024/11/12 20:55:45 fetching corpus: 5600, signal 160693/203229 (executing program) 2024/11/12 20:55:45 fetching corpus: 5650, signal 160969/203230 (executing program) 2024/11/12 20:55:45 fetching corpus: 5700, signal 161273/203230 (executing program) 2024/11/12 20:55:46 fetching corpus: 5750, signal 161734/203230 (executing program) 2024/11/12 20:55:46 fetching corpus: 5800, signal 162035/203230 (executing program) 2024/11/12 20:55:46 fetching corpus: 5850, signal 162439/203230 (executing program) 2024/11/12 20:55:46 fetching corpus: 5900, signal 163640/203230 (executing program) 2024/11/12 20:55:46 fetching corpus: 5950, signal 163973/203230 (executing program) 2024/11/12 20:55:47 fetching corpus: 6000, signal 164178/203230 (executing program) 2024/11/12 20:55:47 fetching corpus: 6050, signal 164485/203230 (executing program) 2024/11/12 20:55:47 fetching corpus: 6100, signal 164766/203230 (executing program) 2024/11/12 20:55:47 fetching corpus: 6150, signal 165096/203230 (executing program) 2024/11/12 20:55:48 fetching corpus: 6200, signal 165520/203230 (executing program) 2024/11/12 20:55:48 fetching corpus: 6250, signal 165890/203230 (executing program) 2024/11/12 20:55:48 fetching corpus: 6300, signal 166351/203230 (executing program) 2024/11/12 20:55:48 fetching corpus: 6350, signal 166748/203230 (executing program) 2024/11/12 20:55:49 fetching corpus: 6400, signal 167099/203230 (executing program) 2024/11/12 20:55:49 fetching corpus: 6450, signal 167347/203230 (executing program) 2024/11/12 20:55:50 fetching corpus: 6500, signal 167767/203230 (executing program) 2024/11/12 20:55:50 fetching corpus: 6550, signal 168111/203230 (executing program) 2024/11/12 20:55:50 fetching corpus: 6600, signal 168585/203230 (executing program) 2024/11/12 20:55:51 fetching corpus: 6650, signal 168827/203230 (executing program) 2024/11/12 20:55:51 fetching corpus: 6700, signal 169080/203230 (executing program) 2024/11/12 20:55:51 fetching corpus: 6750, signal 169401/203230 (executing program) 2024/11/12 20:55:51 fetching corpus: 6800, signal 169679/203230 (executing program) 2024/11/12 20:55:51 fetching corpus: 6850, signal 169974/203230 (executing program) 2024/11/12 20:55:52 fetching corpus: 6900, signal 170235/203230 (executing program) 2024/11/12 20:55:52 fetching corpus: 6950, signal 170555/203230 (executing program) 2024/11/12 20:55:52 fetching corpus: 7000, signal 170802/203230 (executing program) 2024/11/12 20:55:52 fetching corpus: 7050, signal 171065/203230 (executing program) 2024/11/12 20:55:52 fetching corpus: 7100, signal 171344/203235 (executing program) 2024/11/12 20:55:52 fetching corpus: 7150, signal 171729/203235 (executing program) 2024/11/12 20:55:53 fetching corpus: 7200, signal 172446/203235 (executing program) 2024/11/12 20:55:53 fetching corpus: 7250, signal 172727/203235 (executing program) 2024/11/12 20:55:53 fetching corpus: 7300, signal 173119/203235 (executing program) 2024/11/12 20:55:53 fetching corpus: 7350, signal 173306/203235 (executing program) 2024/11/12 20:55:53 fetching corpus: 7400, signal 173909/203235 (executing program) 2024/11/12 20:55:53 fetching corpus: 7450, signal 174113/203235 (executing program) 2024/11/12 20:55:54 fetching corpus: 7500, signal 174357/203238 (executing program) 2024/11/12 20:55:54 fetching corpus: 7550, signal 174644/203238 (executing program) 2024/11/12 20:55:54 fetching corpus: 7600, signal 174866/203238 (executing program) 2024/11/12 20:55:54 fetching corpus: 7650, signal 175051/203238 (executing program) 2024/11/12 20:55:54 fetching corpus: 7700, signal 175375/203238 (executing program) 2024/11/12 20:55:55 fetching corpus: 7750, signal 175754/203238 (executing program) 2024/11/12 20:55:55 fetching corpus: 7800, signal 175936/203238 (executing program) 2024/11/12 20:55:55 fetching corpus: 7850, signal 176177/203238 (executing program) 2024/11/12 20:55:56 fetching corpus: 7900, signal 176573/203238 (executing program) 2024/11/12 20:55:56 fetching corpus: 7950, signal 176911/203238 (executing program) 2024/11/12 20:55:56 fetching corpus: 8000, signal 177298/203238 (executing program) 2024/11/12 20:55:56 fetching corpus: 8050, signal 177593/203238 (executing program) 2024/11/12 20:55:57 fetching corpus: 8100, signal 177898/203238 (executing program) 2024/11/12 20:55:57 fetching corpus: 8150, signal 178127/203238 (executing program) 2024/11/12 20:55:57 fetching corpus: 8200, signal 178337/203238 (executing program) 2024/11/12 20:55:57 fetching corpus: 8250, signal 178811/203238 (executing program) 2024/11/12 20:55:58 fetching corpus: 8300, signal 179074/203238 (executing program) 2024/11/12 20:55:58 fetching corpus: 8350, signal 179310/203238 (executing program) 2024/11/12 20:55:58 fetching corpus: 8400, signal 179429/203238 (executing program) 2024/11/12 20:55:58 fetching corpus: 8450, signal 179706/203238 (executing program) 2024/11/12 20:55:59 fetching corpus: 8500, signal 179935/203238 (executing program) 2024/11/12 20:55:59 fetching corpus: 8550, signal 180161/203238 (executing program) 2024/11/12 20:55:59 fetching corpus: 8600, signal 180374/203238 (executing program) 2024/11/12 20:55:59 fetching corpus: 8650, signal 180617/203238 (executing program) 2024/11/12 20:56:00 fetching corpus: 8700, signal 180796/203238 (executing program) 2024/11/12 20:56:00 fetching corpus: 8750, signal 181182/203238 (executing program) 2024/11/12 20:56:01 fetching corpus: 8800, signal 181382/203238 (executing program) 2024/11/12 20:56:01 fetching corpus: 8850, signal 181624/203238 (executing program) 2024/11/12 20:56:01 fetching corpus: 8900, signal 181914/203238 (executing program) 2024/11/12 20:56:02 fetching corpus: 8950, signal 182101/203238 (executing program) 2024/11/12 20:56:02 fetching corpus: 9000, signal 182325/203238 (executing program) 2024/11/12 20:56:02 fetching corpus: 9050, signal 182672/203238 (executing program) 2024/11/12 20:56:03 fetching corpus: 9100, signal 182971/203238 (executing program) 2024/11/12 20:56:03 fetching corpus: 9150, signal 183223/203238 (executing program) 2024/11/12 20:56:03 fetching corpus: 9200, signal 183468/203238 (executing program) 2024/11/12 20:56:03 fetching corpus: 9250, signal 183673/203238 (executing program) 2024/11/12 20:56:04 fetching corpus: 9300, signal 183824/203239 (executing program) 2024/11/12 20:56:04 fetching corpus: 9350, signal 184076/203239 (executing program) 2024/11/12 20:56:05 fetching corpus: 9400, signal 184273/203239 (executing program) 2024/11/12 20:56:05 fetching corpus: 9450, signal 184508/203239 (executing program) 2024/11/12 20:56:05 fetching corpus: 9500, signal 184688/203239 (executing program) 2024/11/12 20:56:06 fetching corpus: 9550, signal 184960/203239 (executing program) 2024/11/12 20:56:06 fetching corpus: 9600, signal 185148/203239 (executing program) 2024/11/12 20:56:06 fetching corpus: 9650, signal 185338/203239 (executing program) 2024/11/12 20:56:07 fetching corpus: 9700, signal 185727/203239 (executing program) 2024/11/12 20:56:07 fetching corpus: 9750, signal 185928/203239 (executing program) 2024/11/12 20:56:07 fetching corpus: 9800, signal 186118/203239 (executing program) 2024/11/12 20:56:08 fetching corpus: 9850, signal 186304/203239 (executing program) 2024/11/12 20:56:08 fetching corpus: 9900, signal 186501/203239 (executing program) 2024/11/12 20:56:08 fetching corpus: 9950, signal 186713/203239 (executing program) 2024/11/12 20:56:08 fetching corpus: 10000, signal 186919/203239 (executing program) 2024/11/12 20:56:09 fetching corpus: 10050, signal 187212/203239 (executing program) 2024/11/12 20:56:09 fetching corpus: 10100, signal 187466/203239 (executing program) 2024/11/12 20:56:09 fetching corpus: 10150, signal 187699/203239 (executing program) 2024/11/12 20:56:10 fetching corpus: 10200, signal 188046/203239 (executing program) 2024/11/12 20:56:10 fetching corpus: 10250, signal 188282/203239 (executing program) 2024/11/12 20:56:10 fetching corpus: 10300, signal 188522/203239 (executing program) 2024/11/12 20:56:10 fetching corpus: 10350, signal 188828/203243 (executing program) 2024/11/12 20:56:11 fetching corpus: 10400, signal 189032/203243 (executing program) 2024/11/12 20:56:11 fetching corpus: 10450, signal 189173/203243 (executing program) 2024/11/12 20:56:11 fetching corpus: 10500, signal 189374/203243 (executing program) 2024/11/12 20:56:12 fetching corpus: 10550, signal 189625/203243 (executing program) 2024/11/12 20:56:12 fetching corpus: 10600, signal 189781/203243 (executing program) 2024/11/12 20:56:12 fetching corpus: 10650, signal 190035/203243 (executing program) 2024/11/12 20:56:12 fetching corpus: 10700, signal 190230/203243 (executing program) 2024/11/12 20:56:13 fetching corpus: 10750, signal 190373/203243 (executing program) 2024/11/12 20:56:13 fetching corpus: 10800, signal 190556/203243 (executing program) 2024/11/12 20:56:13 fetching corpus: 10850, signal 190728/203243 (executing program) 2024/11/12 20:56:13 fetching corpus: 10900, signal 190907/203243 (executing program) 2024/11/12 20:56:13 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/12 20:56:13 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/12 20:56:16 starting 8 fuzzer processes 20:56:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, r0, 0x1, 0x70bd25, 0xc0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x2e, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x81, 0x20, @device_b, 0x6, 0x3, 0x8}}, @peer_mgmt={0x75, 0x6, {0x1, 0x6, @void, @val=0x14, @void}}]}, @NL80211_ATTR_IE={0xcd, 0x2a, [@measure_req={0x26, 0x9a, {0x6, 0x70, 0x1, "5869c8922ef4e1cd3a73303d88e803274b2aecb2c55a0106d3b5cb042cd431f7bcd18a096a46329124f48dcc3552cfbd93ec5070743294a7e72f9b01818a1ee694b489c56eef1fc19c3efa2b4cee64540dc4a3fafd1d807664edb3065bc98576e97f996117943b33675fe1e0452a10a077237ef55a595d3b16e823ba6df670ad17f7b911d65b76c1b581360ca8bbb1a2d2564461a76e9e"}}, @channel_switch={0x25, 0x3, {0x0, 0x70, 0xff}}, @ibss={0x6, 0x2, 0x6c}, @erp={0x2a, 0x1, {0x1}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x3f, @device_b, 0xfff, "", 0x1ff, 0x300, @broadcast, 0x1}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf8, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffff9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xa1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xab, 0xc5, "1274470800b56a0a0c9c18cb6b44d7b9135e412b17793647685dc4cba452dc9113b8cde644c6e291182d1cb6d5b38d3a80bed2235f64934a5e7bd8ede13ae3d1503afc8bbb077d2be681ea7a2cbbcc55f092e19a6ddbecf44ec4a8aaa1c9470074be590335aa9bdd747c1a90f10b7b21409c635d5df68ca7e07572b51fb2922a372ba256319499147d2be7e0b4134a037f63f1cc20842fa6a21851a5ba9fd5ba3f4402dfcf6c23"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff2239}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4048880) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2000001) r3 = accept4(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000007c0)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x7, 0xfffffe00, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x7800, 0x8000, 0xfffffdfc}}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000ac0)={0x0, @ax25={0x3, @bcast, 0x3}, @isdn={0x22, 0x81, 0x6}, @xdp={0x2c, 0x10, 0x0, 0x1a}, 0x30, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a80)='wg0\x00', 0x4, 0x1}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000d00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x154, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x9}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x58}}}}, [""]}, 0x28}}, 0x4001) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000f00)={0x0, @llc={0x1a, 0x20, 0x4, 0x1b, 0x0, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @llc={0x1a, 0x206, 0x20, 0x7f, 0x31, 0x6, @multicast}, @can, 0xfff, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000ec0)='sit0\x00', 0xffff, 0x9, 0x8}) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000f80)) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x70, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffff, 0x1f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004810) 20:56:16 executing program 5: write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/spi_host', 0x0, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="012f", 0x2, 0x3}, {&(0x7f0000000180)="bfc3c2d25fa15ffc72819fd6c5da15e0f1ace9ac1d8161f0b83af056970d1130453fac214f772a9575937920916e8e7c2fbb8a6b4e3dcfb9292075a6321f3b158b7f4000f3819a70c8880b4fa03236f59f99e4741e16c3420b4755e653a11cd721577dbddbb0ab45a13de704bfee4f1c27de8bdd20b885d71b5044a43c2384566cfb942623c8473b3de983d52f50263278d789c1c1b255f63642fa72d54a6f8508496cbc0803cd9b3fda71fa7dc4e28dff83da51ece5cc4fb832c072ce207895a91362eee8b33d9876b33847", 0xcc, 0x8}], 0x20090, &(0x7f00000002c0)={[{@data_ordered}, {}, {@grpquota}, {@noacl}, {@sb={'sb', 0x3d, 0xffff}}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@dioread_lock}], [{@fowner_lt={'fowner<', 0xee01}}, {@measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '*'}}, {@obj_type={'obj_type', 0x3d, '^/}$'}}]}) r4 = openat(r3, &(0x7f0000000380)='./file0/file0\x00', 0x1, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x41) tee(r1, r4, 0x4, 0x1) r5 = getgid() recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/50, 0x32}, {&(0x7f0000000600)=""/224, 0xe0}], 0x3, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x100}, 0x2023) setxattr$system_posix_acl(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000880)={{}, {0x1, 0x1}, [{0x2, 0x4, 0xffffffffffffffff}, {}], {}, [{0x8, 0x5, r5}, {0x8, 0x2, r6}], {0x10, 0x4}, {0x20, 0x2}}, 0x44, 0x1) r7 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000900)=[@mss={0x2, 0x8001}, @mss={0x2, 0xbd8}, @mss, @mss={0x2, 0x10f}, @timestamp, @window={0x3, 0x0, 0xfffa}], 0x6) getsockname(r2, &(0x7f0000000940)=@nfc, &(0x7f00000009c0)=0x80) close_range(r3, r7, 0x0) connect$unix(r4, &(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a80), 0x400000, 0x0) vmsplice(r8, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="b6177ce2b7542d8db60493c23e868588ecfdd205518f5ab3c1aa8c27785843463d460e949bbd9a539f93fead4f1e1127e87635ad500fa8f7a9c96ab4b2f315e67c3e68026a8ed2dc0c2d8ebc6c6c3d47c702b7e31f27a2591d67f4c2dd47f43b76994173351b2749384c639492cbaedd7b81583c97feb1a6eaf14f2ed68c7a69f753873aa259ce92421195d632197e8440cc6552d218e6deb51b69478a5bb35c1bc047e1564ca1d4d2c09a8be7e42e55988205c61f9750fffc55c5eaef6d7b13610960a1675d9008d6f9070a33ab2da408295c17f479f4f48c", 0xd9}, {&(0x7f0000000bc0)="83ab2ea68b3fb54287101531b6c84946bf66ce1e76ba9d4674ae19112dac74d302d05dc9da4c162718068524826769eb950f08f5e6850a4e8b87b200bdcc57783bfaa1ebb43d433e903f73c164eaaaa3e21fd518357fc4cb1eb24a79349b320ca81ec53b6cdbd59bcbdfc4da44daddfe8d13d2a3a19c426738c102dbfdf920a5bcec10cd5dc45179a2", 0x89}, {&(0x7f0000000c80)="ebc71b6978250160f81e4f32becf88f9d4177b0a1010a1c224401e2a4c18f442c964621a406a63ddfa405cedbcf273292021456410d34b7f65200a5037e7c11a4b7ff6871ce7b099626f280f0a741e3636ef216e240701e3123b22eb7c92e5f829b0cbcb1ea92b310afc27a9042d544b3ddb581324de62070873886c0deba08eee93b4030ecda99ca95a5bffc779a0a70bfd00b167140df3ee8a68169040511136ceaee45ce268a78179e9ef7e8bade5fa88d14eebbe59f0c2697315e376635729d3364b788ad913ce9c693a5660cf940f19d29809b9ec317901", 0xda}, {&(0x7f0000000d80)="7fe5269ebad4f6a0f95b67fbd8f1", 0xe}, {&(0x7f0000000dc0)="ab6190653a42b899ed89ba1e7ff9bc654eb9e091bc5e2b4174fdcb30c9a308fd47d18578ef", 0x25}, {&(0x7f0000000e00)="6c3ea706b3eaef5922288dd2c4ca292138893859ee6f3af40f9e0b3318140d5651df1b6242c67b8ece7f56aeddb2d14d1b13811c042a78d940df813f41d4ce11232733a4e35d2b32be57829a84b43ad3e57d656a78b9ea2e38d0ea78dea257981322849236c902d2c0975cd2b28b2ca262a2d46dc65b85f4c956a957db3e5ec12ac45cf13bb24b694d7268a689e896956aa575f45187ade1404e67fcb89d52d8f6cab0e21b514c0e9483df019204f9196262191e80678ed76bf0b8", 0xbb}, {&(0x7f0000000ec0)="f7a631655284dff14b6b91855c586092ffd8d763ec174757a8279113d3128ed7c6fec335b311000a02ce4a2dc9f951cf51c18ed30fc56d0a816e650b863709f759cc2c283a0f6f59e37bbfabbb2f1cd1b497d4a1be6bd2d19d3ad357c4c0df6ce9ee5da5650df5b94efece5378e831a628e0faf37c5eca7a877e6acc797654999ee11b78d7d396a7be87b42ca79da9bafacf711c4582d6a12db42c926efea494c4dc9509bd8495c4d1df7001344c931f0dba760d62e17ff2bc", 0xb9}], 0x7, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x16c}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x200040c0) 20:56:16 executing program 1: sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa000000}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd73a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9060}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xd0}}, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2f0, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x101, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3c9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x29400000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcc5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @remote, 0x8001}}}}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd7b}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x2f0}}, 0x1) r2 = socket$inet6(0xa, 0x4, 0x100) write$binfmt_script(r2, &(0x7f0000000680)={'#! ', './file0', [{0x20, '}(]'}], 0xa, "aae8800c362ce760afa5cad0a7325ab824a6cdd95e091ce72c4fc81fbd5ec412e70ed38badb70daae9bdc79b814993dd5c0044ab0c256023106d81971872837956e0d3b8d1de518c4a84269d3adbe976450a2488e613bb0ea20c81c0c37a1e14b624f1eb3c45b047eead0c1fc54af1fdc883d7632b595e59af09ffe7ab42d679cf20988397cbfa5bd9d5a9cdceee7da50112c2ffff31f3a5"}, 0xa7) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000740)=0x0) fcntl$setown(r3, 0x8, r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x164, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbfb4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x699d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @private0, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb2d5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000082}, 0x4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2ac34708952980ae}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_a, @random="f41e60cfbc4a", {0x9, 0x80}}, 0x3c, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x59}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000f00)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000f80)={0xc72, {{0xa, 0x4e22, 0x5, @remote, 0x5}}, {{0xa, 0x4e24, 0x2, @private1, 0x7}}}, 0x108) pipe2(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) accept$inet(r8, 0x0, &(0x7f0000001100)) getsockopt$inet_udp_int(r9, 0x11, 0x7685d1b2eb973f1f, &(0x7f0000001140), &(0x7f0000001180)=0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f00000011c0)=0x1) 20:56:16 executing program 6: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r0 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x91}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "7e43e344"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xc, 0x4, "c5fc7f5e1571cc83"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b9321351a6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b355183780773b75ee3015e5f7"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ef137f5eeb6cec9c11e30a9748"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x814}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x4340, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80000000, 0x6c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x10004000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20000800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r2, &(0x7f00000006c0)={0xffffffffffffffff, r0, 0x9}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000700)={{0x29, @multicast2, 0x4e20, 0x4, 'sh\x00', 0x4, 0x0, 0x4c}, {@broadcast, 0x4e20, 0x1, 0x2d14b9dc, 0xff, 0x3}}, 0x44) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0xe6242, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000007c0)={r2, 0x8000, 0x7, 0x6}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000800)={{r4}, 0x3, 0x9, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000840)={{0x1, 0x1, 0x18, r3, {0x81}}, './file0\x00'}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x69}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040081}, 0x20000040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000004) r7 = open_tree(r0, &(0x7f0000000b00)='\x00', 0x0) write(r7, &(0x7f0000000b40)="1811c7c40865fb3391d0d4bc99d821ccc24379fecd30afbd989237ac68712cfff3914575ec4f6f0f9298add6cdf018a7e1d4ac73aa0ef85c11e692dc65ea45d3f20473f971371510675f46e5708cdf2ebbafd6bbfec5460fdf07090e12ea1ca4a9635450842c0462f2ad32c3d443c32f", 0x70) 20:56:16 executing program 2: setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3d8, 0xe8, 0xe8, 0x1f0, 0x2f0, 0x2f0, 0x2f0, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x5}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xfffffff7, {0x74c}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2b7f7edfd9fa369d431208aa4f014b205ca7384120b1bae47c0faf87f269"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x428) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0xfffffffffffffffe) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xbe}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r4 = getpgrp(0x0) fcntl$lock(r3, 0x5, &(0x7f0000000600)={0x0, 0x2, 0x9, 0x4, r4}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x101001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000680)={0xb9d, {{0xa, 0x4e22, 0xa6a8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x88) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000740)) recvfrom$inet6(r5, &(0x7f0000000780)=""/7, 0x7, 0x162, 0x0, 0x0) recvfrom$inet(r3, &(0x7f00000007c0)=""/251, 0xfb, 0x2000, 0x0, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000008c0)={{0xa, 0x4e21, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0xff53, [0x3, 0x6, 0x2cc7172e, 0xa8, 0x0, 0x1, 0x7ff, 0x1000]}, 0x5c) fcntl$addseals(r0, 0x409, 0xa) r7 = dup3(r0, r5, 0x80000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001180)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f00000009c0)={0x778, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x3, 0x1}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4965d8924f30c99, 0x9, 0x18, 0x0, 0x36, 0x4, 0x24, 0x1b, 0x24, 0x9, 0x1, 0x6, 0x24, 0x6d, 0x2, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf000, 0x3, 0x7fff, 0xff1a, 0x4, 0x6, 0x3, 0x4]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x4}, {0x2, 0x9}, {0x4, 0x7}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x2}, {0x4, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x7}, {0x7, 0x1}, {0x0, 0xa}, {0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x7, 0x2}, {}, {0x2, 0x7}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x6}, {0x6, 0x4}, {0x7, 0x6}, {0x3}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x100, 0x5, 0x2, 0x6, 0x1, 0x6, 0x26]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0xc, 0x1, 0x9, 0x4]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0x8}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x7}, {0x5, 0x11}, {0x5, 0x2}, {0x3, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x6, 0x1}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x1}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0xa}, {0x6, 0x1}, {0x5, 0x9}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x5, 0x9}, {0x7, 0x9}, {0x2}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x4, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x5, 0x5}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x7}, {0x6, 0xa}, {0x3, 0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x18, 0x5, 0x1b, 0x2, 0x3, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x84, 0x400, 0xfff9, 0x7ff, 0x2, 0x81, 0x0, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd692, 0x62, 0x200, 0x7, 0x9, 0xc45, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0xa}, {0x0, 0x8}, {0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x5, 0x7}, {0x6, 0xa}, {0x4, 0x6}, {0x6, 0x1}, {0x4, 0x6}, {0x6, 0x6}, {0x3, 0x8}, {0x0, 0x2}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x3, 0x4}, {0x4, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x4}, {0x6, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {0x5, 0x2}, {0x6}, {0x6, 0x9}, {0x4, 0x7}, {0x2, 0x2}, {0x2, 0x4}, {0x6, 0x9}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x48, 0xb, 0x30, 0x30, 0x48, 0x12, 0xb, 0x60, 0x48, 0x0, 0x60, 0x24, 0x9, 0x6, 0x78, 0xb, 0x4, 0x5, 0xc, 0x30, 0x1, 0x1b]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x5, 0x0, 0x1, 0x2, 0xfffc, 0x641]}}]}]}, @NL80211_ATTR_TX_RATES={0x298, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x48, 0x30, 0x36, 0x28, 0x16, 0x48, 0x9, 0x36, 0x16]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x8}, {0x0, 0x9}, {0x4, 0x5}, {0x2}, {0x0, 0x4}, {0x7}, {0x2, 0x7}, {0x1, 0x8}, {0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x5, 0x8}, {0x3}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x9}, {0x3, 0x3}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x1}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x9}, {0x4, 0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x8}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0x6}, {0x1}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0x8}, {0x0, 0x2}, {0x3, 0x1}, {}, {0x2, 0x2}, {}, {0x7, 0x2}, {0x7, 0xa}, {0x1, 0x8}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {0x4, 0xa}, {0x6, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x1}, {0x0, 0x7}, {0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x6}, {0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x3, 0x5}, {0x2, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x1, 0xe7f4, 0x0, 0x1, 0x4, 0x7]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7, 0x4, 0x6362, 0x2000, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x6}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x5, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x1, 0x4}, {0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x16, 0x1, 0x71, 0x1b, 0x24, 0x36, 0x6c, 0x6, 0xc, 0x48, 0x1, 0x12, 0xc, 0x30, 0x3, 0x4, 0x92c1617357dedc41, 0x24, 0x3, 0x9, 0x18, 0x3, 0x1b, 0xb]}]}, @NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x1, 0x3, 0x1, 0x1b, 0x60, 0x18, 0x4, 0x9, 0x48, 0x36, 0x1b, 0x5, 0x5, 0x30, 0x36, 0x1, 0x5]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x60, 0x53, 0x18, 0x6c, 0x60, 0x36, 0x6c, 0x36, 0x2, 0x5, 0x48, 0x1b, 0x30, 0x3, 0x3, 0x24, 0x24, 0x4, 0x3b, 0x34, 0x4, 0xc, 0xb, 0x48, 0x1b, 0x16, 0xb, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x12, 0x5, 0x9, 0x87, 0x7f, 0x7c1b, 0x80, 0x380c]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x5}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x3, 0x5}, {0x7}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x5}, {0x3, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x1}, {0x2, 0x9}, {0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x5}, {0x4, 0x8}, {0x3, 0x8}, {0x3, 0x3}, {0x4, 0x3}, {0x0, 0x2}, {0x1}, {0x5, 0x1}, {0x7, 0x7}, {0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0x4}, {0x2, 0x1}, {0x2}, {0x6, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x4}, {0x1, 0x3}, {0x4, 0xa}, {0x5}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0xa}, {0x3}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x6, 0x1b, 0x74, 0x1b, 0x6c, 0x1, 0x5, 0x16, 0xc, 0x4, 0x16, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x800, 0x100, 0x1af, 0x5, 0xdd40, 0x9]}}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x6, 0x3, 0x1b, 0x24, 0x1b, 0x6, 0x60, 0x5, 0x6, 0x3, 0x12, 0x2, 0x12, 0x5, 0x3, 0x16, 0x24, 0x5, 0x1]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x9}, {0x3, 0x9}, {0x1}, {0x4, 0x5}, {0x5, 0x5}, {0x2, 0x6}, {0x6, 0xa}, {0x5, 0x1}, {0x7, 0x4}, {0x7}, {0x2, 0x8}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x9}, {0x2, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x3, 0x6}, {0x7}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0x4}, {0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0x6, 0x4, 0x4, 0x7, 0x800, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x48, 0x3, 0x30, 0xb, 0x3, 0x9, 0x9, 0x3, 0x24, 0x24, 0x9, 0x60, 0x1, 0x4, 0x36, 0x3, 0x6c, 0x24, 0x60, 0x24, 0x1b, 0x24, 0x2, 0x5, 0x60, 0x6, 0x24, 0x6c, 0x6, 0xc]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x2, 0xa}, {0x7, 0x8}, {0x6, 0x1}, {0x1, 0x1}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x2}, {0x6, 0x8}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x8}, {0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x5, 0x6}, {0x5, 0x1}, {0x2}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x1}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0x3}, {0x0, 0x7}, {0x6}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x6, 0xa}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x4, 0xa}, {0x5, 0x7}, {0x5, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x6, 0xa}, {0x4, 0x5}, {}, {0x1, 0x3}, {0x1}, {0x1, 0x5}, {0x5, 0x9}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x4, 0x6}, {0x4, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x7}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0xb, 0x9, 0x4, 0x36, 0x12, 0x9, 0xc, 0x5]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x807f, 0x1, 0x7fff, 0x8d, 0x800, 0x7f2e, 0x9]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x1}, {0x6, 0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0xa}, {0x4, 0x9}, {0x2, 0xa}, {0x2}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x5}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0xa}, {0x2}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x6}, {0x0, 0x1}, {0x7, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x5, 0x6}, {0x3, 0x8}, {0x6, 0x2}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0xfd, 0x79, 0x533b, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0x8, 0x0, 0x7, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x4, 0x30, 0x5, 0x48, 0x9, 0x16, 0x5, 0x6, 0x2, 0x9, 0x9, 0x1b, 0xb, 0x5, 0x60, 0xb, 0x6, 0x12, 0x30, 0x6, 0x2, 0x9, 0x30, 0xc, 0x36, 0x20, 0x9e23ec110efac3f8, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0xb, 0x6, 0x5, 0x5, 0x1b, 0x6, 0xb, 0x16, 0x18, 0x76, 0x0]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3b, 0x1b, 0x18, 0x4, 0xc, 0x4, 0x0, 0x1, 0x4, 0x36, 0x16]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x60, 0x30, 0x60, 0x2]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x2, 0x59, 0x60, 0x3, 0x24, 0x6c, 0x48, 0x30, 0x30, 0x4, 0x48, 0x24, 0x30, 0x6c, 0xb, 0x9, 0x1, 0x75, 0xc, 0x24, 0x18, 0x5, 0x4, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x48, 0x18, 0x16, 0x16, 0x36, 0x2, 0xc, 0x60, 0x16, 0x30, 0xc, 0x6, 0x2, 0x0, 0x6, 0x30, 0x5, 0x36, 0x6c, 0x6c, 0x1, 0x18, 0x36, 0x5, 0xc, 0x30]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0xd, 0x1b, 0x60, 0xc, 0x6c, 0xc, 0x9, 0xb, 0x1b, 0x9, 0x12, 0x1, 0x24, 0x6e, 0x6c, 0xc, 0x12, 0xb, 0x30, 0x4, 0x18, 0x5, 0x30, 0x16, 0x1, 0x53, 0x1, 0xb]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x48, 0x2, 0x24, 0x3, 0x1f, 0x5, 0x60, 0x4, 0x9, 0xc]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x14, 0x6c, 0x1, 0x6c, 0x3, 0xb, 0x1b, 0x48, 0xb, 0x24, 0x2, 0x0, 0x1, 0x24, 0x5, 0x16, 0x24, 0xb, 0x30, 0x5, 0x5, 0x12, 0x4b, 0x6c, 0x36, 0x6, 0xb, 0x9, 0x24]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x16, 0x16, 0x13, 0x0, 0xc, 0x60]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x5}, {0x2}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x6, 0x48, 0x12, 0xb, 0x4, 0x4, 0x60, 0x1, 0x2, 0x12, 0x3, 0x9, 0xc, 0x18, 0x16, 0x16, 0x36, 0x24, 0x60, 0x6c, 0x36, 0x12, 0xb]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x71, 0x0, 0x7, 0xca, 0x1f, 0x3ff, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x0, 0x79b8, 0x4bc, 0x3, 0xab48, 0x800, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x1}, {0x7, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {0x6, 0x6}, {0x4, 0x8}, {0x6}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x2, 0x9}, {0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x6}, {0x2}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x5, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x3}, {0x3, 0x9}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x9}, {0x7, 0x2}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0x6}, {0x0, 0x6}, {}, {0x2, 0x6}, {0x5, 0xa}, {0x7, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x3, 0x8}, {0x3, 0x7}, {0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x6}, {0x3}, {0x6, 0x2}, {0x6, 0x6}, {0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x3}, {0x3}, {0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x4, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xa, 0xc, 0xc, 0x6, 0x6c, 0x1d, 0x48, 0x12]}]}]}]}, 0x778}}, 0x80) [ 135.912358] audit: type=1400 audit(1731444976.891:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:56:16 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x2, 0x2, 0xa7d}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x1a86f000) r1 = pidfd_getfd(r0, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x80, 0x1f, 0x4, 0x0, 0x5, 0x22, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000100), 0x7}, 0x8420, 0x7, 0x10001, 0x9, 0xfffffffffffffffc, 0x6, 0x1ff, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0xa) r2 = open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x8000) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xa029, r1, &(0x7f00000001c0)="f414c2e0863d7d7da5a1fdb81f3764d45f0106ef81c16ed0cbee8f04a12bbaaf08978f7d2b95be532c39c1ff89894b6d401d38402d8545a9565f3b2fe79fdec9509018bcf35c5450ec811fe76877051b251c3c93d54192e01e4239aa6c63a1a9ff57e899961ad3a0dfa35c8c26e903af1c160d1e2efac4acf37aeeb14151253198ca6253e96ad44f6f7a9b47604230261c41ffe2561005ba7c0ae176caf7090cfee6fb1e206335e3", 0xa8, 0x3, 0x0, 0x0, r2}, &(0x7f0000000300)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat2(r0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x40, 0x14, 0x2}, 0x18) write(r3, &(0x7f0000000600)="b0e9034d5e1673eb229d1e2860aa379f21b0e762ed924276b2c29a140078097e6ccdc64813a29b70034f517000747ded0f7d92090d61d799604ca21854e45ee85fb3ad2fbe72e06eff92895df6fcb1ff34994955fb44f2b0b29f404ccf4eb45c4adf2f6b3d18be003286a7b4ab876e9570e07f955e54496b538fc7d41c7af5987eeaeb3087f1b08be224ec90e840a38d731b102ba98827eedf818eb39f3f9de5640fd6cf50b137ff4ffb97521da64991d13b8221a54a5beeded35c", 0xbb) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000006c0)={0x3a65, 0xffffffff, 0x40, 0xfffffff8, 0x3, "977ec2a01d06ffc77364d2130a32afacf07faa", 0x1, 0xfc8}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x29, 0x81, 0x80, 0x1, 0x1, @mcast2, @remote, 0x20, 0x40, 0x2, 0x8b7}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000007c0)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x40, 0x6, 0x8001, 0x4, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8, 0x4, 0x5}}) pwrite64(r0, &(0x7f00000008c0)="52e561bcc1451b4b33d27a34bf27065c6a2bfbeb8c450d41e2dcb5945751b5f573e582788de4f108b2743b1a", 0x2c, 0x101) r4 = memfd_secret(0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000900)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000940)) 20:56:16 executing program 7: ptrace$peekuser(0x3, 0xffffffffffffffff, 0x196c7aa3) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x5, 0x8, 0x101, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x3}, [@generic="6c47b6f80d29e6f5999151468dff2a2f269f78d0d75fd631cc3db6f2343dc1ab93e948c4d2090c1dbeaad830e3c13557b2a8649769745e8187ab8df0115a4cac7b5387232e7afb6eb95c61bea0bd7c1673c51eb6a77040fc93fe56cda3c39e6c1e85ca121d054a6b99f1a62fdfa9d70ddc5704f816b9508a9c0187761b1ccb4436c398"]}, 0x98}, 0x1, 0x0, 0x0, 0x48048}, 0x40090) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) getpriority(0x0, r0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000001c0)={0x2, {0x1, 0x600, 0x100000000, 0xdaf, 0x5}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x400880, 0x0) r1 = fork() r2 = syz_open_procfs(r1, &(0x7f0000000240)='net/netfilter\x00') prctl$PR_SET_PTRACER(0x59616d61, r0) wait4(r1, &(0x7f0000000280), 0x20000000, &(0x7f00000002c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x206000, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0xffffffff00000001) sendfile(r4, r4, 0x0, 0x80000001) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x17b200, 0x0) ioctl$CDROM_NEXT_WRITABLE(r5, 0x5394, &(0x7f0000000440)) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$SNAPSHOT_FREE(r5, 0x3305) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007, 0x110, 0xffffffffffffffff, 0x56686000) 20:56:16 executing program 4: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x5]}, 0x8) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x9c}}, 0x4000090) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x10, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4800) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x10) r1 = memfd_secret(0x80000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x800) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000600)=0xffffffff, &(0x7f0000000640)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xf4, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1cf}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xd371}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xae}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80000001}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xf4}}, 0x2000c000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001440)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f0000000c40)={0x7a4, r5, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x63}}}}, [@NL80211_ATTR_TX_RATES={0x244, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0x1}, {0x3, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x6}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x3, 0x3}, {0x2, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x4}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcbb7, 0xc9, 0x3, 0x45, 0x101, 0x9, 0x0, 0x2438]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x2}, {0x4, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0x1}, {0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x5, 0x6}, {0x5, 0x6}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0x9}, {0x7, 0xa}, {}, {0x3, 0x2}, {0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x8}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x2}, {0x5}, {0x5}, {0x1, 0x7}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x8}, {0x4, 0x9}, {0x3, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x5}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3fd, 0x7f, 0x9, 0x1000, 0xffff, 0xe7f, 0xff01]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x9, 0x200, 0x7, 0xffff, 0xffc0, 0x8]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x7}, {0x6, 0x8}, {0x1, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1f, 0xbb, 0xfffd, 0x1, 0xfff, 0x0, 0x930b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3f, 0x80, 0xff71, 0x4, 0x40, 0x8, 0x5]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x4}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x4}, {0x7, 0x8}, {0x6, 0x6}, {0x2}, {0x7, 0x3}, {0x5, 0x4}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x48, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x11c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x36, 0x1, 0x30, 0x1b, 0x44, 0x16, 0xc, 0x12, 0x16, 0x24, 0x52, 0x4, 0x2, 0x41, 0x2, 0x1b, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec5, 0x0, 0x7, 0x0, 0x101, 0x80a3, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xff, 0x1ff, 0xf7, 0xfff8, 0x2, 0x0, 0x4e63]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x1}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x8}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {0x6, 0x8}, {0x3, 0x8}, {0x3, 0x7}, {0x7, 0x6}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x5, 0x8}, {0x2, 0x7}, {0x4, 0x5}, {0x5}, {0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x5}, {0x6, 0x1}, {0x5, 0x4}, {0x4}, {0x4, 0x2}, {0x5}, {0x6}, {0x6, 0x8}, {0x6}, {0x1}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0xa}, {0x0, 0x3}, {0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x3}, {0x3, 0x9}, {0x7}, {0x7, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xff7f, 0xbbd, 0x4, 0x5b, 0x1, 0x8, 0x200]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x2}, {0x5, 0x3}, {0x4, 0x6}, {}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x2}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x4}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x4, 0x1}, {0x1}, {0x4, 0x2}, {0x3}, {0x4}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x6, 0x8}, {0x0, 0xa}, {0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x9}, {0x5, 0x8}, {0x3, 0x4}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x401, 0xff, 0x9, 0x101, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x5, 0x5, 0x60, 0x12, 0x36, 0x4, 0x6c, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0x0, 0x8, 0x8, 0x0, 0x4f1, 0x80]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4}, {0x7, 0x8}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x4, 0x8}, {0x7}, {0x3, 0x1}, {0x2, 0x7}, {0x4, 0x6}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x1}, {0x4, 0x9}, {0x5, 0x1}, {0x4, 0x3}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x7}, {0x1}, {0x7, 0x6}, {0x7, 0x8}, {0x3}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5ae9, 0x9, 0xa7, 0x40, 0x8, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x6}, {0x6}, {0x5, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0xa}, {0x2}, {0x1, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x3, 0xc, 0x1b, 0x30, 0xc, 0x1b, 0x60, 0x24, 0x6c, 0x2, 0x30, 0x26, 0xf4e5a4c0d9c5b521, 0x36, 0x48, 0x36, 0x3, 0x4, 0x16, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x6c, 0x0, 0x9, 0x16, 0x3, 0x2, 0x30, 0xc, 0xb, 0x6, 0x78, 0x36, 0x5, 0x6, 0x48, 0x4, 0x1b, 0x1, 0x9, 0x30, 0x30, 0x4e, 0x9]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x3, 0x8001, 0x100, 0x1e, 0x5]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x1}, {0x5, 0x7}, {0x0, 0x4}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0x6}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x6, 0x1}, {0x4, 0x6}, {0x1}, {0x1, 0xa}, {0x5, 0x2}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x6}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0xa}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x38, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x9}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x5}, {0x5, 0x9}, {0x2, 0x6}, {0x4, 0x7}, {0x5, 0x6}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x5}, {0x1, 0x7}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0x3}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x6, 0x5}, {0x4, 0x8}, {0x4, 0x2}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x7}, {0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x6}, {0x0, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x6}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0xa}, {0x1, 0x2}, {0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x2, 0x5}, {0x6, 0xa}, {0x2}, {0x4, 0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x5}, {0x4, 0x7}, {0x6}, {0x1, 0x1}, {0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x5}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x6}, {0x5}, {0x6, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x8}, {0x6, 0x5}, {0x7, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {0x3, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x9}, {0x5}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6, 0x4, 0xfff8, 0xffff, 0x7, 0x2, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0xff, 0x3, 0x80, 0x2, 0x8000]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc2, 0x4, 0x56ca, 0x0, 0x0, 0x40, 0x8001, 0x80]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x8, 0x2, 0xb6af, 0x8, 0x2, 0x7]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x1c, 0x1, 0x4, 0x48, 0x24, 0x16, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xfff8, 0x1f, 0x3, 0x0, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x1, 0x18, 0xa, 0x9, 0x18, 0x4, 0x6, 0x2, 0x1b, 0x6c, 0x60, 0x1, 0x6c, 0x18, 0x6, 0x48, 0x4, 0x18]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x8627548ad966ea5a]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x24, 0x4, 0x12, 0x1b, 0x9, 0x12, 0xb, 0x1b, 0x5, 0x60, 0x6, 0xb, 0x16, 0xf2a00b3a8f5142c6, 0x30, 0xc, 0xc]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0xa}, {0x7, 0x1}, {0x2, 0x7}, {0x6, 0xa}, {0x4, 0x4}, {0x5, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x5}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x5}, {0x0, 0x2}, {0x4, 0xa}, {0x4, 0xa}, {0x6}, {0x4, 0xa}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x5}, {0x7}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x7}, {0x7, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x7, 0x7}, {0x6}, {0x7, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0xa}, {0x7, 0x7}, {0x2, 0x3}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0x2}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x7}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x4}, {}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x3}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0xfff8, 0x8, 0x1, 0x7f, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x5, 0x1}, {0x4, 0x7}, {0x3}, {}, {0x6, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0x4}, {0x5, 0x5}, {0x7}, {0x7, 0x7}, {0x4, 0x4}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x1}, {0x7, 0x5}, {}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x4}, {0x5, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb, 0x40, 0x400, 0x6, 0x4e3, 0x0, 0x3, 0x2]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x40, 0x7f, 0x7, 0x4, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x1}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x6, 0x6}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x7}, {0x2}, {0x2, 0x5}, {0x6, 0xa}, {0x3, 0x2}, {0x3}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {}, {0x4, 0xa}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x0, 0x6}, {0x7, 0x2}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x3}, {0x3, 0x8}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x9a8, 0x1, 0x1, 0xa99, 0x2136, 0x4]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x18, 0x36, 0x30, 0x9, 0x36, 0x36, 0x1b, 0x75]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x9, 0x18, 0x88f505c238a78061, 0x36, 0x16, 0x0, 0x3, 0x9, 0x6, 0x36, 0x16, 0x1, 0x48, 0x4]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x48, 0x36, 0x5, 0x1, 0x16, 0x1b, 0x16, 0x5, 0x5, 0x9, 0x60, 0x6c, 0x5, 0x36, 0x24]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x9, 0x9, 0x9, 0x1, 0x16, 0x2, 0x60, 0x30, 0x1, 0xc, 0x16, 0x24, 0x48, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x16, 0x1, 0x36, 0xb, 0x43, 0x1b, 0x9, 0x6c, 0x20, 0x24, 0x3, 0x16, 0x48, 0x5, 0xb, 0x3, 0x30, 0x0, 0x60, 0x48, 0x6c, 0x18, 0x48, 0x3]}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x3}, {0x5, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x9}, {0x6, 0x6}, {0x6, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x6}, {0x1}, {0x2, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x3, 0x4, 0x9, 0x2, 0x16, 0x30, 0x24, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc1, 0x57ce, 0x5ea, 0xdc, 0x4, 0x7, 0x8]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x7}, {0x5, 0x6}, {0x7, 0x6}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x4}, {0x1, 0x4}, {0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x1a}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x8}, {0x6, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x4, 0x6}, {0x3, 0x8}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x7}, {0x6, 0x5}, {0x1}, {0x1, 0x7}, {0x5, 0x3}, {0x2, 0xa}, {0x7, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x7}, {0x7}, {0x6, 0x3}, {0x7, 0x9}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x6}, {}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x3, 0x9}]}]}]}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x4}, 0x40001) r6 = accept4$unix(r0, &(0x7f0000001480), &(0x7f0000001500)=0x6e, 0x800) ioctl$FIONCLEX(r6, 0x5450) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001580)={0x2, &(0x7f0000001540)=[{0xff81, 0x2b, 0x7f, 0x949}, {0x4, 0x0, 0x7e, 0xe0c}]}, 0x10) [ 137.100583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.103375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.104880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.109293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.115734] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.117058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.338327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.340760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.343838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.346970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.348357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.350763] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.351864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.354322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.360117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.375706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.377684] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.383236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.408063] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.421272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.425166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.427778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.433590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.435915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.443504] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.450918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.456156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.457442] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.461140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.462811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.465303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.466287] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.473998] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.477274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.478254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.481037] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.481074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.484574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 137.502739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.507664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 137.512434] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.521933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.522740] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 137.524024] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.534676] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 137.535713] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.549195] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 137.552025] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.195057] Bluetooth: hci0: command tx timeout [ 139.378671] Bluetooth: hci1: command tx timeout [ 139.441735] Bluetooth: hci2: command tx timeout [ 139.569781] Bluetooth: hci5: command tx timeout [ 139.570578] Bluetooth: hci3: command tx timeout [ 139.633721] Bluetooth: hci4: command tx timeout [ 139.634384] Bluetooth: hci6: command tx timeout [ 139.635229] Bluetooth: hci7: command tx timeout [ 141.234723] Bluetooth: hci0: command tx timeout [ 141.424687] Bluetooth: hci1: command tx timeout [ 141.488818] Bluetooth: hci2: command tx timeout [ 141.618003] Bluetooth: hci3: command tx timeout [ 141.618784] Bluetooth: hci5: command tx timeout [ 141.682682] Bluetooth: hci7: command tx timeout [ 141.683178] Bluetooth: hci4: command tx timeout [ 141.683808] Bluetooth: hci6: command tx timeout [ 143.280720] Bluetooth: hci0: command tx timeout [ 143.472709] Bluetooth: hci1: command tx timeout [ 143.536708] Bluetooth: hci2: command tx timeout [ 143.665591] Bluetooth: hci3: command tx timeout [ 143.666111] Bluetooth: hci5: command tx timeout [ 143.729810] Bluetooth: hci4: command tx timeout [ 143.730314] Bluetooth: hci6: command tx timeout [ 143.731087] Bluetooth: hci7: command tx timeout [ 145.329622] Bluetooth: hci0: command tx timeout [ 145.520717] Bluetooth: hci1: command tx timeout [ 145.585633] Bluetooth: hci2: command tx timeout [ 145.713588] Bluetooth: hci5: command tx timeout [ 145.714111] Bluetooth: hci3: command tx timeout [ 145.777688] Bluetooth: hci6: command tx timeout [ 145.779143] Bluetooth: hci7: command tx timeout [ 145.780620] Bluetooth: hci4: command tx timeout [ 197.328703] syz-executor.4 (281) used greatest stack depth: 24704 bytes left [ 200.400927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.403624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.404877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.410203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.411885] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.413029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.450292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.451991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.453073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.454660] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.454933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.460267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.462119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.463322] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.469798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.471334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.472660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.474922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.478212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.479925] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 200.481055] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.507355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.508307] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.513102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.514060] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.519865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.519908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.520644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.528303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.530194] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.531947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.538036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.539825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.543052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 200.570368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.574671] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.578238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.580578] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.586390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.590025] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 200.592193] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 200.601377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.605652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.668998] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 200.680314] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 200.684980] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 200.686372] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 200.687835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 202.481653] Bluetooth: hci0: command tx timeout [ 202.544797] Bluetooth: hci1: command tx timeout [ 202.546064] Bluetooth: hci3: command tx timeout [ 202.610874] Bluetooth: hci2: command tx timeout [ 202.698094] Bluetooth: hci6: command tx timeout [ 202.699043] Bluetooth: hci5: command tx timeout [ 202.737195] Bluetooth: hci7: command tx timeout [ 202.737928] Bluetooth: hci4: command tx timeout [ 204.528613] Bluetooth: hci0: command tx timeout [ 204.592817] Bluetooth: hci1: command tx timeout [ 204.593309] Bluetooth: hci3: command tx timeout [ 204.656590] Bluetooth: hci2: command tx timeout [ 204.721034] Bluetooth: hci6: command tx timeout [ 204.722041] Bluetooth: hci5: command tx timeout [ 204.784938] Bluetooth: hci4: command tx timeout [ 204.785428] Bluetooth: hci7: command tx timeout [ 206.576836] Bluetooth: hci0: command tx timeout [ 206.640593] Bluetooth: hci1: command tx timeout [ 206.641088] Bluetooth: hci3: command tx timeout [ 206.704546] Bluetooth: hci2: command tx timeout [ 206.769219] Bluetooth: hci5: command tx timeout [ 206.770915] Bluetooth: hci6: command tx timeout [ 206.832656] Bluetooth: hci7: command tx timeout [ 206.833161] Bluetooth: hci4: command tx timeout [ 208.625287] Bluetooth: hci0: command tx timeout [ 208.689653] Bluetooth: hci3: command tx timeout [ 208.690144] Bluetooth: hci1: command tx timeout [ 208.752525] Bluetooth: hci2: command tx timeout [ 208.816751] Bluetooth: hci6: command tx timeout [ 208.817246] Bluetooth: hci5: command tx timeout [ 208.880546] Bluetooth: hci7: command tx timeout [ 208.881053] Bluetooth: hci4: command tx timeout [ 262.980917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.983528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.989059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.994527] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.997372] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 263.007148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.111056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.114686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.115771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.123790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.124780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.127186] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.128522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.129683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.132949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.139716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.141567] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.143568] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.255401] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.266790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.274777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.277033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.279276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.289393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.292112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.297590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.298819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.316806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.320193] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.322837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.326705] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.327900] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.328875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.333747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.350080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.354738] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.361961] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.362930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.363594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.369181] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.389744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.406139] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 263.406985] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.410631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.411339] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.431685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.437835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 263.446302] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.074509] Bluetooth: hci0: command tx timeout [ 265.200533] Bluetooth: hci2: command tx timeout [ 265.200576] Bluetooth: hci1: command tx timeout [ 265.392657] Bluetooth: hci3: command tx timeout [ 265.456610] Bluetooth: hci5: command tx timeout [ 265.456647] Bluetooth: hci7: command tx timeout [ 265.456973] Bluetooth: hci4: command tx timeout [ 265.521787] Bluetooth: hci6: command tx timeout [ 267.121883] Bluetooth: hci0: command tx timeout [ 267.248581] Bluetooth: hci2: command tx timeout [ 267.248698] Bluetooth: hci1: command tx timeout [ 267.440914] Bluetooth: hci3: command tx timeout [ 267.505599] Bluetooth: hci5: command tx timeout [ 267.506142] Bluetooth: hci7: command tx timeout [ 267.506475] Bluetooth: hci4: command tx timeout [ 267.569720] Bluetooth: hci6: command tx timeout [ 269.169543] Bluetooth: hci0: command tx timeout [ 269.296535] Bluetooth: hci1: command tx timeout [ 269.299485] Bluetooth: hci2: command tx timeout [ 269.488655] Bluetooth: hci3: command tx timeout [ 269.552766] Bluetooth: hci4: command tx timeout [ 269.552906] Bluetooth: hci7: command tx timeout [ 269.553222] Bluetooth: hci5: command tx timeout [ 269.617511] Bluetooth: hci6: command tx timeout [ 271.217515] Bluetooth: hci0: command tx timeout [ 271.344526] Bluetooth: hci2: command tx timeout [ 271.345020] Bluetooth: hci1: command tx timeout [ 271.538703] Bluetooth: hci3: command tx timeout [ 271.600579] Bluetooth: hci7: command tx timeout [ 271.600717] Bluetooth: hci4: command tx timeout [ 271.601544] Bluetooth: hci5: command tx timeout [ 271.664613] Bluetooth: hci6: command tx timeout [ 325.500864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.502324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.504275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.507272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.509706] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.511213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.948171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.950052] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.953975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.958596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.964778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 325.967035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.972817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.973934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.975743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.976548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.979009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.985546] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.989807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.993129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.995213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.997484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 325.998272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.999959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.001866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.003214] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.004723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.020902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.027079] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 326.028271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.040052] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.042660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.044157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.079195] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.080523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.089730] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 326.091800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.094730] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.095993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.100592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.102196] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 326.103651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.142861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 326.145999] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 326.147359] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 326.150228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 326.152237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 326.153569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.536540] Bluetooth: hci0: command tx timeout [ 328.048714] Bluetooth: hci1: command tx timeout [ 328.115832] Bluetooth: hci3: command tx timeout [ 328.115908] Bluetooth: hci5: command tx timeout [ 328.116669] Bluetooth: hci2: command tx timeout [ 328.176555] Bluetooth: hci6: command tx timeout [ 328.241653] Bluetooth: hci7: command tx timeout [ 328.312461] Bluetooth: hci4: command tx timeout [ 329.585096] Bluetooth: hci0: command tx timeout [ 330.097702] Bluetooth: hci1: command tx timeout [ 330.161738] Bluetooth: hci5: command tx timeout [ 330.162310] Bluetooth: hci3: command tx timeout [ 330.163030] Bluetooth: hci2: command tx timeout [ 330.224598] Bluetooth: hci6: command tx timeout [ 330.288518] Bluetooth: hci7: command tx timeout [ 330.353847] Bluetooth: hci4: command tx timeout [ 331.633073] Bluetooth: hci0: command tx timeout [ 332.144667] Bluetooth: hci1: command tx timeout [ 332.208594] Bluetooth: hci2: command tx timeout [ 332.208640] Bluetooth: hci5: command tx timeout [ 332.209050] Bluetooth: hci3: command tx timeout [ 332.272632] Bluetooth: hci6: command tx timeout [ 332.336620] Bluetooth: hci7: command tx timeout [ 332.401449] Bluetooth: hci4: command tx timeout [ 333.680548] Bluetooth: hci0: command tx timeout [ 334.192681] Bluetooth: hci1: command tx timeout [ 334.256580] Bluetooth: hci3: command tx timeout [ 334.258008] Bluetooth: hci5: command tx timeout [ 334.258491] Bluetooth: hci2: command tx timeout [ 334.321740] Bluetooth: hci6: command tx timeout [ 334.384693] Bluetooth: hci7: command tx timeout [ 334.450495] Bluetooth: hci4: command tx timeout [ 388.046684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.048625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.052741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.062261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.068230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 388.070781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.350870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.354891] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.356036] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.360986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.369611] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 388.371353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.410166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.414668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.416034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.421941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.428132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 388.429319] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.522837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.525920] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.527859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.537962] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.547790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.551300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.555118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 388.556571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.585801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.589285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.594836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 388.596621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.613773] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.624479] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.632340] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.633794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.639667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.641383] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 388.642633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.652360] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.671746] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.686447] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.689199] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.754847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.757006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.760590] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 388.767295] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.776672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.786268] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 388.787947] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 390.129586] Bluetooth: hci0: command tx timeout [ 390.449527] Bluetooth: hci2: command tx timeout [ 390.449551] Bluetooth: hci1: command tx timeout [ 390.577027] Bluetooth: hci3: command tx timeout [ 390.641465] Bluetooth: hci4: command tx timeout [ 390.704462] Bluetooth: hci6: command tx timeout [ 390.896561] Bluetooth: hci7: command tx timeout [ 390.896627] Bluetooth: hci5: command tx timeout [ 392.178653] Bluetooth: hci0: command tx timeout [ 392.496553] Bluetooth: hci2: command tx timeout [ 392.496809] Bluetooth: hci1: command tx timeout [ 392.627479] Bluetooth: hci3: command tx timeout [ 392.688686] Bluetooth: hci4: command tx timeout [ 392.753491] Bluetooth: hci6: command tx timeout [ 392.945497] Bluetooth: hci7: command tx timeout [ 392.945517] Bluetooth: hci5: command tx timeout [ 394.225468] Bluetooth: hci0: command tx timeout [ 394.544686] Bluetooth: hci1: command tx timeout [ 394.545211] Bluetooth: hci2: command tx timeout [ 394.672557] Bluetooth: hci3: command tx timeout [ 394.736513] Bluetooth: hci4: command tx timeout [ 394.801766] Bluetooth: hci6: command tx timeout [ 394.992673] Bluetooth: hci7: command tx timeout [ 394.992672] Bluetooth: hci5: command tx timeout [ 396.273682] Bluetooth: hci0: command tx timeout [ 396.592634] Bluetooth: hci1: command tx timeout [ 396.592653] Bluetooth: hci2: command tx timeout [ 396.720532] Bluetooth: hci3: command tx timeout [ 396.784562] Bluetooth: hci4: command tx timeout [ 396.850657] Bluetooth: hci6: command tx timeout [ 397.040493] Bluetooth: hci5: command tx timeout [ 397.041034] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:01:23 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff813ef450 RCX=0000000000000001 RDX=1ffff11007d1fec3 RSI=ffffffff810a7f87 RDI=ffff88803e8ff54c RBP=ffff88803e8ff510 RSP=ffff88803e8ff478 R8 =0000000000000001 R9 =ffff88803e8ff4b8 R10=000000000003c001 R11=0000000000020bfd R12=ffff88803e8ff540 R13=0000000000000000 R14=ffff888015f09b80 R15=0000000000092cc0 RIP=ffffffff810d1089 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbbbd0fc6f4 CR3=0000000037d02000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff11002d59f9c RCX=0000000000000812 RDX=ffff8880166d1b80 RSI=ffffffff81ff5fcc RDI=ffff88802de72700 RBP=ffff88802de72700 RSP=ffff888016acfce0 R8 =0000000000000812 R9 =000000000000001b R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000812 R14=0000000000000003 R15=ffff888008c61c80 RIP=ffffffff81ff5fcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f95daf32288 CR3=000000001c40e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000