Warning: Permanently added '[localhost]:39464' (ECDSA) to the list of known hosts. 2025/01/20 04:38:50 fuzzer started 2025/01/20 04:38:50 dialing manager at localhost:44245 syzkaller login: [ 63.835068] cgroup: Unknown subsys name 'net' [ 63.920728] cgroup: Unknown subsys name 'cpuset' [ 63.947393] cgroup: Unknown subsys name 'rlimit' [ 68.833282] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 04:39:06 syscalls: 206 2025/01/20 04:39:06 code coverage: enabled 2025/01/20 04:39:06 comparison tracing: enabled 2025/01/20 04:39:06 extra coverage: enabled 2025/01/20 04:39:06 setuid sandbox: enabled 2025/01/20 04:39:06 namespace sandbox: enabled 2025/01/20 04:39:06 Android sandbox: enabled 2025/01/20 04:39:06 fault injection: enabled 2025/01/20 04:39:06 leak checking: enabled 2025/01/20 04:39:06 net packet injection: enabled 2025/01/20 04:39:06 net device setup: enabled 2025/01/20 04:39:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 04:39:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 04:39:06 USB emulation: enabled 2025/01/20 04:39:06 hci packet injection: enabled 2025/01/20 04:39:06 wifi device emulation: enabled 2025/01/20 04:39:06 802.15.4 emulation: enabled 2025/01/20 04:39:06 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 04:39:08 starting 8 fuzzer processes 04:39:08 executing program 0: r0 = socket(0x11, 0x0, 0x100) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)="d1f9cb09d095451f46858a34a6ae016dd367fc40991cd55607e2d94e6918147060a09ec0acac2641a5f58ff72a2e33951b979db190315510441483845c45b36ac8cafdfc7fe5698cb1273f9ef655633a309577f641779e2ec1664f930a2821a4d13f2ead1145d123f16198cb4042bc73de4970b0bc2086afffc0b6f877253bb4cbc17d302488488445bed3778809f690c2f3afd969afc750fc0277b892c2c26ad945e8e30be0f0c60bcd2d0b004975e1729313c642debe97b34a6d7997bea0ae0b0b94", 0xc3) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r1, 0x10, 0x0, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x5c}}, 0x815) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x1) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x12}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000740)=0xe8) socketpair(0x18, 0x3, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r7, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x74}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r5) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 04:39:08 executing program 1: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40304}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x41) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x854) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x250, 0x0, 0x202, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x230, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffd}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fc4ec5303b276ad3e939ef7931f1d6e7c10dc9679c68e29969322ca8cc60bc03"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "00b4c200f075d396592bb375da0c5590"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7f0e046f84651d08157fe6ae89f4b384"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff7fff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x250}, 0x1, 0x0, 0x0, 0xbcdcf89a58d33877}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20448d4}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x138, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '@-]\\.#[{\']:\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080000}, 0x48018) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x11}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x800, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x20000000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x201000, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ec0)=@IORING_OP_STATX={0x15, 0x1, 0x0, r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e80)='./file0\x00', 0x10, 0x100, 0x1}, 0x3ff) setgroups(0x2, &(0x7f0000000f00)=[0x0, r6]) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001040), r0) 04:39:08 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c095}, 0x20000080) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004004}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004050}, 0x24008900) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x1c}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004881}, 0x80) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x82000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x40) io_setup(0x7ff, &(0x7f0000000880)=0x0) r7 = perf_event_open(&(0x7f00000008c0)={0x3, 0x80, 0x3f, 0xea, 0x1, 0xf8, 0x0, 0xffffffff, 0x808, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x20, 0x4000000000000000}, 0x1200, 0x9, 0x10001, 0x6, 0xf4d, 0xff, 0x4, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0xa, r3, 0x8) io_cancel(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000940)="3427cc661b29f6edc7098fd15a2f1f3e88148fed4dcf041992bb72c73cb79f10c7974b7413c7b367fc6f53a1387734c04fef98199459b4d707b9868407d62b50579faf3f025b811a3a9f11fc7a8dbe563062f12661bb221d7cec33885ad5fdd266e0972e2dcc34c8646525abd2", 0x6d, 0x7, 0x0, 0x2, r3}, &(0x7f0000000a00)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7fffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xaba}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0xc081) [ 81.590074] audit: type=1400 audit(1737347948.907:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:39:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c005}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000007c0)={&(0x7f0000000140), 0xc, &(0x7f0000000780)={&(0x7f0000000180)={0x5d4, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x3]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x119e}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x595, 0x33, @reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @initial, {0x7, 0x1}}, 0x1002, 0x4, @device_b, {0x0, 0x1b, @random="84330e3b7137f822173388a99c09bdb9a635da82280904fab69258"}, @void, @void, [{0xdd, 0xe9, "99f1e844fa6a32105dce87505f57f38c197899444d7f0fe76eea4e27fc912cf4d6825b3a75961a32b4904ae8be43b34b22dff37d17883c1269e2612ae3e48466acabef6adb12a49fd8f37e2589072119a28e468334c0048c3866e032d8800c3776d510d84571520e20dbabf1fc905660e8e7bf651318e09dfc487862be1e60dae9a7117e12c84516ee561bd520bc5b97d89f8d874992153395e9c85121b0f3c133eeb8fbe6aa126a06b0a0cbf40087e40970ff0d1628a9dc6436ebe56d665420b7172cdcf7146802619c6f3b45dad423812e9d197fe56a7d3272e52e94a3286c5bd732fe12534e8961"}, {0xdd, 0x93, "9b18fa4c1f2659d1374fd9f2634698756ff0d4babbd100a0c0c46681525c01dda320cefd569f83a8990f7ba1ba1f97afcf7d19265f8762aec4dbae4658b41af0092e76f6db91849d66c57bcbb4799833ef21415507bbb426e07cb2909f9f29d68f875acffaa172a5c52de5d48843b8a100bbb208fdb68d351c0dbb4177b783280b13b0bc5601e54ef5244af28dd820d56f77c0"}, {0xdd, 0xce, "bb2cf5c8502c53a211d62a82473bbfa55f6c91187a0740fc9df78da3c4ff39768d7f755077f87e0a1a17c7771b76ac4c67e42e526affc00ce91179c9f8b98791b14f13593181a6f92d1d830885c6e149bc9983dea1f9829237b7543510c3574fec8b5b18f96ea3b2a32bafe2502dd165f9df9b5b7d476775cfab23007d8726c1a3e56f6239972a9587518a420eccd4a250a602242800f44035be3691ed3880ed43f7f7c719d1cc963f923016c254a5efdb2f8e028743ca8bc356614126990d0f1a2d396f823571ea531b5cf9253c"}, {0xdd, 0xcf, "cd61fe6678df7ba6a95f3cbaf4c0e3e56c0ff73d42a2109317f9f448cc8096fadbb42bf4292bc5df7fba3707873eb13c5ae50f57ff82d7c1df1923c2e3d6bfb8d3b432dab90eb5ccf4baafe9f3e7af0f3b7f36b852fbbf2226ffaebc678e80f9c14079dcaf5e5e3df298d4ae914bbd24ad5580608adb6cfde6a1cf29e0a046f7c567f3f72dca1e5bec3be4e36f6df3c7cf61c9f58f4f9e675774afcce862e4d7361e714b8e576b04c4dba3a3831b8961df89aec683f70841c3acabe487f725cfba0d183e9dcd157af5b7df63c5e300"}, {0xdd, 0xa0, "6a278a9c637b7a980ab56e661d07c3dd62454c44b2c4d43659831e2cd8eeee82dd8be986f41c5e6e5b8e46bf67e0517d1362e67b0a5fc30b31b3e10d0c3ad392c880b8d5e1584aca2d3a1094438b7f7c8b99f8613abf6295131aa753e345bfb763724cdd46b6e8ad302de318c24fa21f60db0b781a0bb0005a78ca9e8ae5995067c27a58388b5c7b157ee3955a54d569640a4096b36022e2b2b6b91e1cb516cf"}, {0xdd, 0xd0, "67e187480549910593310b1ad1a072ed63fb416c5d62c6f51b5b72ed8db7204ad0dbf5866f8320a215cd6058e8dcd0368ced95f5fa38af065ff0644c869569c9987183cc3bf71950cf836e8f32f4ad868fe119ba8ca5646b19a974e2143e9ae596fb32fefe3da5440ea09a02265b63a91cd41acfb0a9cd0cbe52a963dbd6d0e8ffe7dd74b68686548425b78949ff24f35f559f405eebe3b407634c50b4b6ab8c7c025be90619fd87845eb23cf8bbc874f90a9f8edbb765bbfed73b8346965c668ea0ccf0795767c0972f12d4c13fa73d"}, {0xdd, 0x25, "172ad4ca3bf233f08812a2964df5cc3567a926968463b2584797b6dfa2f5ffe1ea99360a3e"}, {0xdd, 0x6e, "64cca7a7ad502aca5a172a7e375018f86a42c324e71a466141800dd0cfb6cf8bf02a28a0f5c525db5a9020459db4d42e261f68712fff9dcfb036597708522508df8fa02ecbf5ae1494a3b7a03e8659b2a4c66344c728d6641ba1ea89650ef430c410927f88f28cc7ba89b58504b1"}, {0xdd, 0x24, "d60b6c6403f2e86ee3e1ad1337d56ffbcb1bebb348842b8f7f7c9130f19589c7d4276528"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x800}, 0x805) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x24020084) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xaa5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80000}, 0x1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000ac0), r0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r2, 0x700, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, r4, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe7}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400d0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="6af11da42208"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xae}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x6c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '{\xf2\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff5b52, 0x62}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb0, 0x11}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) 04:39:08 executing program 4: r0 = socket(0x2, 0x6, 0x5) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x40}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc0}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x801) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x40, 0x20, 0x8, 0x300000, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x3, [{0x7, 0x10, "a4894b754d5b895bb9e97c1d1a2d"}, {0xc, 0x4, "17ce"}, {0x6, 0x9, "e8ff251fbb075f"}]}, @generic={0x44, 0x7, "4db7631c55"}, @timestamp={0x44, 0x10, 0xa4, 0x0, 0x8, [0x4, 0x0, 0x9]}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffeffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) io_setup(0x1, &(0x7f0000000340)=0x0) io_submit(r2, 0x4, &(0x7f0000000640)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff, &(0x7f0000000380)="b2a51522cffea0040e11f591a6df2dffda752b7fc96ec0c2689ba6af1999c4f2f27b436db7463bd68f65a9638c457829af758302ef1dc45ef4f0a42b2003", 0x3e, 0x5, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x4196, r0, &(0x7f0000000400)="512f55a03e1fcca6c9c338a0f8689021f2f23a6dbda7831bdb1636ba5e15fc1f1eb1385d0700d12ee7f96b24be0dd350487070474262310364ceabf6b6d8bb75eefb8219db38e2450b7bca95071adf15d9cf47d65f51850047b7abeabdbdfa719865807c98d1fdfca184c77dd76cb35f491cf25fea73ee345b", 0x79, 0x8, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x40, r0, &(0x7f00000004c0)="25ed93c213165aa09d860b264b161a24848f4071408770fb495545580e24e85b02761437a03fdff7b581ccf46dc47b9f65c82af52da9776875786e62f5f45cbdfb94679d397ea9244a677464af1f43da1c0293cb474b511478c63a49f38da02e39414baa6453ff6ddf23e14acf14cb1e2ce2", 0x72, 0x6, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000580)="5d44450c49ccf046557bbe5ac8edd6e7b9b1add37b8ad5a0b618d42d52e683957edc9e02f66247f97be9cb7a2bc7b477e6ec5fabc7d25bd01364d33adb159f32867bdc8e74e835fdc2c7e167b25f783f34c159db67", 0x55, 0xfffffffffffff001}]) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'tunl0\x00', &(0x7f00000006c0)={'ip_vti0\x00', r1, 0x10, 0x80, 0x4, 0x4, {{0x27, 0x4, 0x3, 0x19, 0x9c, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@rr={0x7, 0x7, 0x59, [@empty]}, @cipso={0x86, 0x21, 0x1, [{0x0, 0xa, "cdacb2ac67107075"}, {0x0, 0x11, "525fc287f51bcba6a315d836bdfb6a"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0x5, [{@remote, 0x5}]}, @lsrr={0x83, 0x7, 0x4c, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x27, 0xb4, [@dev={0xac, 0x14, 0x14, 0x42}, @remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1f, 0x9a, [@loopback, @multicast1, @private=0xa010102, @local, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x40050) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x0, 0x90, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffeff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x20000810) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x70, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c001}, 0x40000) r5 = syz_io_uring_complete(0x0) io_cancel(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x6, 0x946, r0, &(0x7f0000000c00)="90bd9843a7021ab682b631ce73d1c9bec0f9acf8db1b98bae544697bdd7451d6bb422c3cdc6c7924161eb557750320b03e0ad24c7faa6cf59f556add2486f0bbec3841bf1347a6521ad0bb4159e1897ae1e8979652f08489f262d20d075bcd0ce92f1ecdd9ae0a6d1461fb75c486c43042a6dc26e5dc11a1fc8f78b17a409b89a0e59e596f2b428e85793c3fe0cb2d0cab59306d2056e72ec3a56d41c71a1d5b8eb26bae8830bd560444000a64f3a2f1477f505484d562037eafce4aa6ff4940b196d08e64bb8fbc8adbdc65c2c0f169157196b6bcc1abcd5394881dcc88248619dab2916767bd4f79", 0xe9, 0x4, 0x0, 0x3, r5}, &(0x7f0000000d40)) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000dc0), r0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x66b1e2e42db43207}, 0x4000850) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xa0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0xc000080) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000a010) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000001140)={0x2, 0x2, 0xffffff81, 0x7fff, 0x7, 0x3}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0xdc61a8609789bd73}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 04:39:09 executing program 5: ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000000)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000040)={0x1, 0xffffffff, 0x0, 0x8, 0x3, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x17c, 0x13, 0x4, 0x70bd2b, 0x25dfdbfd, {0x27, 0x3f, 0x2, 0x6, {0x4e20, 0x4e22, [0x9, 0x8, 0x1f, 0x3], [0x88, 0x1, 0x800, 0x8000000], r0, [0x40, 0x3]}, 0x3, 0x400}, [@INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "4aeb97c376cad0a5d37116fd8c5571deb77e410f7e986f183cdfee805469aaf8519605d62a34e6a7ba589e5c7be6404ee3bcfbe4c8c711185255bcb5d39e4b5a70cd736ef2b8d0b808c30145c9610c3b157b9b3650be173af7b4dba8de18b0d21478b29b8f3b27b2f9826087857beaeb326b502616e9bdfc100a4b27b4da41bbaa39ebcee734c013bcd69e8c9646f3e6492d03f30de54dc29e7b2c4c04e9ea4efdc206"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "cb"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "c82109aa8cfac03055074c5eda2dcb4464d436ec638360ecd0eb45deab5127b7482b6f8058b9cdca6c0d34a87bd0c66407fef9ccda607a246ab458ee98b039d108374c197b125e86c912719e126920f38dbe240feb137c95224141aa7ca6099c1506f483a2ce39590fa402101b8d26c0da27caa6e67d6a272e0e4a"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8051}, 0x81) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000300)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000340)={0x3, 0x2, 0x4, 0x1f, 0x10000, 0x10000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, r2, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x311}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6b9}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb9, 0xbe, "838e2c33e5db1b35255cf28722c76dcdb97904462222d54f105699ace93e0b291e4d30746501769d2344e3c30fe25588929b163230a9d781b0818c4004f99fb5650fde5721fe4405d4721f31dd47875432f4f5a25ab982c6cf3e5fba932cbcbe26d3334ec9b6022408e3ee1b0864d152e704d33e62ecd33cce11915e5793eaf828bb8b049ac2e41075e001c9a16a1bae1d31ac37ae9b53efaba288452306a7ade822d26d4db19adc948849c8ada99b13b12a8c253c"}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x40000) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8001) r4 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x2, 0x40900) ioctl$HIDIOCGFLAG(r4, 0x8004480e, &(0x7f0000000800)) syz_genetlink_get_family_id$smc(&(0x7f0000000840), r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x6d, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x4) 04:39:09 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000040)={0x3, 0x100, 0x137}) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x3, 0x1, 0x7ff, 0x2, 0x5ee0, 0x40, 0x5, 0x2, 0x7, 0xfffff001, 0xfffffffb, 0x401, 0x9ae7, 0x5}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000100)) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000140)={0x3, 0x0, 0x6, 0x1000, 0x1, 0xff}) read$hiddev(r1, &(0x7f0000000180)=""/30, 0x1e) syz_open_dev$hiddev(&(0x7f00000001c0), 0x10001, 0x200100) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x248241, 0x0) io_uring_setup(0x4621, &(0x7f0000000240)={0x0, 0xf63f, 0x2, 0x3, 0x206, 0x0, r2}) socketpair(0x29, 0x6, 0x3, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048005}, 0x40) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x20008090) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/ipc\x00') r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4000080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000a, 0x11, 0xffffffffffffffff, 0x10000000) 04:39:09 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@nfc, 0x0, 0x800, 0x1}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x78}}}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x7d}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x98ab}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5d6a}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x5e}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x79}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x57}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x50}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xa9}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xc6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7ff}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4840}, 0xc59e5d6aa7ff159c) io_pgetevents(0x0, 0x0, 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0xfff]}, 0x8}) socketpair(0xf, 0x6, 0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xa0048000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r6, 0x4, 0xc11, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6d}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40008000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x68}}, 0x200000d0) io_destroy(0x0) io_destroy(0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='freezer.self_freezing\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c0c0) write$P9_RREADLINK(r8, &(0x7f0000000940)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socketpair(0x2b, 0x6, 0x6, &(0x7f0000000980)) io_getevents(0x0, 0x78, 0x3, &(0x7f00000009c0)=[{}, {}, {}], 0x0) [ 83.216264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.224375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.229442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.236096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.239866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.244927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.271068] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.274797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.277183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.282836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.300675] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.305947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.333105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.337174] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.340508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.341077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.359384] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.362018] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.364607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.368426] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.370665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.371217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.376004] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.380621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.414225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.417052] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.419253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.426679] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.430240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.433238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.488081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.491949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.492267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.494197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.501959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.503885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.504780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.511685] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.516771] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.517436] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.529421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.541249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.545563] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.547461] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.548840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.555642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.556735] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.557572] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.300904] Bluetooth: hci0: command tx timeout [ 85.364815] Bluetooth: hci1: command tx timeout [ 85.429026] Bluetooth: hci2: command tx timeout [ 85.429565] Bluetooth: hci3: command tx timeout [ 85.492607] Bluetooth: hci4: command tx timeout [ 85.556590] Bluetooth: hci5: command tx timeout [ 85.620455] Bluetooth: hci6: command tx timeout [ 85.620502] Bluetooth: hci7: command tx timeout [ 87.349675] Bluetooth: hci0: command tx timeout [ 87.415368] Bluetooth: hci1: command tx timeout [ 87.477910] Bluetooth: hci2: command tx timeout [ 87.477995] Bluetooth: hci3: command tx timeout [ 87.540493] Bluetooth: hci4: command tx timeout [ 87.604460] Bluetooth: hci5: command tx timeout [ 87.668697] Bluetooth: hci6: command tx timeout [ 87.669951] Bluetooth: hci7: command tx timeout [ 89.396465] Bluetooth: hci0: command tx timeout [ 89.460672] Bluetooth: hci1: command tx timeout [ 89.524810] Bluetooth: hci3: command tx timeout [ 89.526082] Bluetooth: hci2: command tx timeout [ 89.588395] Bluetooth: hci4: command tx timeout [ 89.654336] Bluetooth: hci5: command tx timeout [ 89.717020] Bluetooth: hci6: command tx timeout [ 89.717128] Bluetooth: hci7: command tx timeout [ 91.444451] Bluetooth: hci0: command tx timeout [ 91.508514] Bluetooth: hci1: command tx timeout [ 91.572466] Bluetooth: hci3: command tx timeout [ 91.573098] Bluetooth: hci2: command tx timeout [ 91.636500] Bluetooth: hci4: command tx timeout [ 91.702376] Bluetooth: hci5: command tx timeout [ 91.764393] Bluetooth: hci7: command tx timeout [ 91.764557] Bluetooth: hci6: command tx timeout [ 145.532892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.538943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.541920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.549826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.552627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.555478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.775809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.779731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.786968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.790214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.793845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.799469] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.805135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.809960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.812043] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.822621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.823022] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.830149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.831462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.839820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.846946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.867956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.876949] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.879722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.943551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.946759] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.947245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.949503] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.952400] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.966095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.972077] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.974819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.977524] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.980599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.987811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.994227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.994261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.998064] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.998138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.002369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.009494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.009523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.014360] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.014708] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.017732] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.018014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.028986] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.052908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.572440] Bluetooth: hci0: command tx timeout [ 147.957538] Bluetooth: hci2: command tx timeout [ 147.957669] Bluetooth: hci1: command tx timeout [ 148.020446] Bluetooth: hci4: command tx timeout [ 148.084498] Bluetooth: hci6: command tx timeout [ 148.148519] Bluetooth: hci5: command tx timeout [ 148.148597] Bluetooth: hci7: command tx timeout [ 148.149495] Bluetooth: hci3: command tx timeout [ 149.620471] Bluetooth: hci0: command tx timeout [ 150.004548] Bluetooth: hci2: command tx timeout [ 150.005585] Bluetooth: hci1: command tx timeout [ 150.069396] Bluetooth: hci4: command tx timeout [ 150.134384] Bluetooth: hci6: command tx timeout [ 150.196435] Bluetooth: hci7: command tx timeout [ 150.196644] Bluetooth: hci3: command tx timeout [ 150.197426] Bluetooth: hci5: command tx timeout [ 151.668391] Bluetooth: hci0: command tx timeout [ 152.052772] Bluetooth: hci1: command tx timeout [ 152.053148] Bluetooth: hci2: command tx timeout [ 152.118922] Bluetooth: hci4: command tx timeout [ 152.180426] Bluetooth: hci6: command tx timeout [ 152.244565] Bluetooth: hci5: command tx timeout [ 152.244730] Bluetooth: hci3: command tx timeout [ 152.244827] Bluetooth: hci7: command tx timeout [ 153.716409] Bluetooth: hci0: command tx timeout [ 154.100640] Bluetooth: hci2: command tx timeout [ 154.102038] Bluetooth: hci1: command tx timeout [ 154.164455] Bluetooth: hci4: command tx timeout [ 154.230566] Bluetooth: hci6: command tx timeout [ 154.292658] Bluetooth: hci7: command tx timeout [ 154.293079] Bluetooth: hci3: command tx timeout [ 154.293254] Bluetooth: hci5: command tx timeout [ 207.493450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.495175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.497152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.507158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.509714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.510921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.684148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.686040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.688143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.689737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.695866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.696987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.701615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.706808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.708034] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.713535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.724794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.725641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.726809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.743606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.744780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.746511] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.751153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.771829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.774823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.780104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.786912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.792891] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.797872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.799535] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.846084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.873528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.882033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.889427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.902759] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.913762] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.915825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.919655] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.926870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.942057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.960508] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.979589] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.979610] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.989632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.989708] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.011719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.030593] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.034566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.589531] Bluetooth: hci0: command tx timeout [ 209.781501] Bluetooth: hci2: command tx timeout [ 209.845011] Bluetooth: hci1: command tx timeout [ 209.845199] Bluetooth: hci4: command tx timeout [ 209.910316] Bluetooth: hci3: command tx timeout [ 210.100388] Bluetooth: hci5: command tx timeout [ 210.100638] Bluetooth: hci6: command tx timeout [ 210.164372] Bluetooth: hci7: command tx timeout [ 211.636724] Bluetooth: hci0: command tx timeout [ 211.829374] Bluetooth: hci2: command tx timeout [ 211.892687] Bluetooth: hci1: command tx timeout [ 211.892846] Bluetooth: hci4: command tx timeout [ 211.956410] Bluetooth: hci3: command tx timeout [ 212.152343] Bluetooth: hci5: command tx timeout [ 212.152467] Bluetooth: hci6: command tx timeout [ 212.212363] Bluetooth: hci7: command tx timeout [ 213.685381] Bluetooth: hci0: command tx timeout [ 213.876486] Bluetooth: hci2: command tx timeout [ 213.941386] Bluetooth: hci1: command tx timeout [ 213.941481] Bluetooth: hci4: command tx timeout [ 214.005429] Bluetooth: hci3: command tx timeout [ 214.197362] Bluetooth: hci6: command tx timeout [ 214.197465] Bluetooth: hci5: command tx timeout [ 214.261324] Bluetooth: hci7: command tx timeout [ 215.733341] Bluetooth: hci0: command tx timeout [ 215.925530] Bluetooth: hci2: command tx timeout [ 215.989363] Bluetooth: hci4: command tx timeout [ 215.989443] Bluetooth: hci1: command tx timeout [ 216.052351] Bluetooth: hci3: command tx timeout [ 216.245443] Bluetooth: hci5: command tx timeout [ 216.245884] Bluetooth: hci6: command tx timeout [ 216.309396] Bluetooth: hci7: command tx timeout [ 269.635576] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.638899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.644159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.652576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.657840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.661744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.704048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.709698] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.713946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.718911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.726601] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.728869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.774014] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.798469] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.819180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.821747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.822496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.835817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.838803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.872738] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.875764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.882060] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.886126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.892805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.894119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.901795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.903434] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.911104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.919601] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.923604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.950752] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.979107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.988964] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.020761] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.030673] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.034859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.040492] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.044427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.053011] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.054837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.060946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.065704] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.073220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.081628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.082667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.086349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.094679] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.122648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.732387] Bluetooth: hci0: command tx timeout [ 271.796365] Bluetooth: hci1: command tx timeout [ 271.988381] Bluetooth: hci4: command tx timeout [ 271.988512] Bluetooth: hci3: command tx timeout [ 271.988798] Bluetooth: hci2: command tx timeout [ 272.180483] Bluetooth: hci6: command tx timeout [ 272.180511] Bluetooth: hci5: command tx timeout [ 272.181116] Bluetooth: hci7: command tx timeout [ 273.780376] Bluetooth: hci0: command tx timeout [ 273.845475] Bluetooth: hci1: command tx timeout [ 274.037070] Bluetooth: hci2: command tx timeout [ 274.038353] Bluetooth: hci3: command tx timeout [ 274.038535] Bluetooth: hci4: command tx timeout [ 274.230396] Bluetooth: hci5: command tx timeout [ 274.230608] Bluetooth: hci6: command tx timeout [ 274.231336] Bluetooth: hci7: command tx timeout [ 275.828527] Bluetooth: hci0: command tx timeout [ 275.892403] Bluetooth: hci1: command tx timeout [ 276.084512] Bluetooth: hci2: command tx timeout [ 276.085760] Bluetooth: hci4: command tx timeout [ 276.085907] Bluetooth: hci3: command tx timeout [ 276.277329] Bluetooth: hci5: command tx timeout [ 276.277664] Bluetooth: hci7: command tx timeout [ 276.277740] Bluetooth: hci6: command tx timeout [ 277.877350] Bluetooth: hci0: command tx timeout [ 277.942309] Bluetooth: hci1: command tx timeout [ 278.132429] Bluetooth: hci3: command tx timeout [ 278.132517] Bluetooth: hci4: command tx timeout [ 278.132565] Bluetooth: hci2: command tx timeout [ 278.324370] Bluetooth: hci6: command tx timeout [ 278.324457] Bluetooth: hci7: command tx timeout [ 278.324540] Bluetooth: hci5: command tx timeout [ 331.583780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.587932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.591738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.600645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.605644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.608683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.907383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.909450] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.911732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.918069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.922598] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.923906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.036350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.040489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.041790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.047688] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.052149] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.054264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.054345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.064496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.066314] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.071428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.075377] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.077588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.099091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.112654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.133771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.139157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.147127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.150414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.153165] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.155138] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.157535] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.159459] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.174100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.175849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.182994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.184851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.187690] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.205954] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.222953] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.224107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.225859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.247629] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.265711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.302503] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.308657] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.311776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.684406] Bluetooth: hci0: command tx timeout [ 333.941373] Bluetooth: hci1: command tx timeout [ 334.133338] Bluetooth: hci2: command tx timeout [ 334.196373] Bluetooth: hci3: command tx timeout [ 334.260364] Bluetooth: hci4: command tx timeout [ 334.326415] Bluetooth: hci5: command tx timeout [ 334.389663] Bluetooth: hci7: command tx timeout [ 334.389990] Bluetooth: hci6: command tx timeout [ 335.732368] Bluetooth: hci0: command tx timeout [ 335.990294] Bluetooth: hci1: command tx timeout [ 336.180364] Bluetooth: hci2: command tx timeout [ 336.245554] Bluetooth: hci3: command tx timeout [ 336.308430] Bluetooth: hci4: command tx timeout [ 336.372357] Bluetooth: hci5: command tx timeout [ 336.438208] Bluetooth: hci6: command tx timeout [ 336.438518] Bluetooth: hci7: command tx timeout [ 337.781582] Bluetooth: hci0: command tx timeout [ 338.037704] Bluetooth: hci1: command tx timeout [ 338.229802] Bluetooth: hci2: command tx timeout [ 338.293306] Bluetooth: hci3: command tx timeout [ 338.357288] Bluetooth: hci4: command tx timeout [ 338.423264] Bluetooth: hci5: command tx timeout [ 338.484303] Bluetooth: hci6: command tx timeout [ 338.484528] Bluetooth: hci7: command tx timeout [ 339.828437] Bluetooth: hci0: command tx timeout [ 340.085538] Bluetooth: hci1: command tx timeout [ 340.278394] Bluetooth: hci2: command tx timeout [ 340.341756] Bluetooth: hci3: command tx timeout [ 340.404466] Bluetooth: hci4: command tx timeout [ 340.468453] Bluetooth: hci5: command tx timeout [ 340.534281] Bluetooth: hci7: command tx timeout [ 340.534326] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:44:19 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88800bd4ed18 RCX=0000000000000001 RDX=1ffff110017a9dae RSI=ffff88800bd4f898 RDI=ffffffff81438a30 RBP=ffff88800bd4ed70 RSP=ffff88800bd4ed00 R8 =0000000000000001 R9 =ffff88800bd4ed58 R10=000000000003ab4d R11=00000000000a7545 R12=ffff88800bd4ede0 R13=0000000000000000 R14=ffff88800ee3d340 R15=ffff8880273a9a00 RIP=ffffffff81348c1d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005624f9aec528 CR3=00000000133da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffff000000000000 XMM01=7322004f544f47202c0065766f6d6572 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff87f2ecd8 RCX=ffffffff814fda06 RDX=1ffff110016fa857 RSI=0000000000000000 RDI=ffff88800b7d42b9 RBP=ffff88800b7d4298 RSP=ffff888014c47320 R8 =0000000000000006 R9 =fffffbfff0fe0df0 R10=ffffffff87f06f87 R11=0000000000000001 R12=ffff88800b7d3780 R13=0000000000000004 R14=dffffc0000000000 R15=0000000000000004 RIP=ffffffff814fdadd RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000001f21870 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ff4d861420 CR3=000000000df2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004153a79400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000