Warning: Permanently added '[localhost]:46729' (ECDSA) to the list of known hosts. 2025/06/10 05:28:29 fuzzer started 2025/06/10 05:28:30 dialing manager at localhost:40003 syzkaller login: [ 96.236289] cgroup: Unknown subsys name 'net' [ 96.380708] cgroup: Unknown subsys name 'cpuset' [ 96.430994] cgroup: Unknown subsys name 'rlimit' 2025/06/10 05:28:46 syscalls: 202 2025/06/10 05:28:46 code coverage: enabled 2025/06/10 05:28:46 comparison tracing: enabled 2025/06/10 05:28:46 extra coverage: enabled 2025/06/10 05:28:46 setuid sandbox: enabled 2025/06/10 05:28:46 namespace sandbox: enabled 2025/06/10 05:28:46 Android sandbox: enabled 2025/06/10 05:28:46 fault injection: enabled 2025/06/10 05:28:46 leak checking: enabled 2025/06/10 05:28:46 net packet injection: enabled 2025/06/10 05:28:46 net device setup: enabled 2025/06/10 05:28:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/10 05:28:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/10 05:28:46 USB emulation: enabled 2025/06/10 05:28:46 hci packet injection: enabled 2025/06/10 05:28:46 wifi device emulation: enabled 2025/06/10 05:28:46 802.15.4 emulation: enabled 2025/06/10 05:28:46 fetching corpus: 0, signal 0/0 (executing program) 2025/06/10 05:28:47 starting 8 fuzzer processes 05:28:47 executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x1, 0x1, 0x200, 0x17, "174262641e9f4eb1"}) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0x6, 0x4, 0x80, 0x0, 0x8001, 0x1000}) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000441}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000081}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x280040, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x3a9002, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x4d, 0x1, &(0x7f0000000340)=""/57, 0x39}, &(0x7f00000003c0)=0x40) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000400)={0x1}) syz_io_uring_setup(0x5, &(0x7f0000000440)={0x0, 0x14e7, 0x0, 0x1, 0x3e4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000580)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file0\x00', 0x80, 0x238100, 0x12345}, 0x5) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x100) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c845) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x67}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x6ecb31d00b85a5e4}, 0x40050) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x243}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x39}, @NL80211_ATTR_PMKID={0x14, 0x55, "809ca9afc632a0be717d5ab6cd4365ba"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x50000, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x8c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x90) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000bc0)='.^@^]\x00', &(0x7f0000000c00)='\'[*%-\x00', 0x0) 05:28:47 executing program 1: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x101, 0x1, 0x4, 0x10001, 0x80000000, 0x9}) pidfd_send_signal(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0xa, 0x3, 0x101}, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xda}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = syz_io_uring_setup(0x6a2d, &(0x7f0000000200)={0x0, 0xf848, 0x0, 0x400, 0x13f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10010, r1, 0x10000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000000) io_uring_setup(0x5b8b, &(0x7f0000000400)={0x0, 0xb5ba, 0x10, 0x2, 0x2}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}}, 0x48000) getpeername(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000680)=0x80) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x40084d3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24000845) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x20044810) r5 = syz_open_dev$vcsu(&(0x7f00000009c0), 0x0, 0x581501) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) syz_io_uring_setup(0x67fd, &(0x7f0000000bc0)={0x0, 0x28b6, 0x1, 0x2, 0x39c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000c40), &(0x7f0000000c80)) 05:28:47 executing program 2: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8900, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000000c0)={0x76c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x98, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6c3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x444, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x33c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x39126840}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2f8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x5}, {0x6}, {0x5, 0x8}, {0x1, 0x4}, {0x7, 0x2}, {}, {0x5, 0x5}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x6, 0x2}, {0x4, 0x3}, {0x4}, {0x3, 0x6}, {0x1, 0x5}, {}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x4}, {0x7, 0x6}, {}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x2}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x2}, {0x6}, {0x3, 0x6}, {0x5, 0x9}, {0x7}, {0x7, 0x5}, {0x1, 0x1}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0xa}, {0x6, 0x5}, {0x4, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff, 0x100, 0x1, 0x40, 0x8001, 0x7, 0xffff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0xb, 0x18, 0x6d, 0x24, 0x6c, 0x9, 0x9, 0x30, 0x1b, 0x1b, 0xb, 0xc]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x60, 0x1b, 0x6, 0x36, 0x60, 0x12, 0x12, 0x48, 0x2, 0x16, 0x16, 0x60, 0xb, 0x24, 0x3, 0x4, 0x1, 0x5, 0x1, 0x6c, 0x6, 0x36, 0x6, 0x4, 0x48, 0x6]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x76, 0x9, 0x0, 0x48, 0x60, 0xd, 0x60, 0x5, 0x18, 0x6, 0x6c, 0xb, 0x30, 0x2, 0x2, 0x5, 0x9, 0x36, 0xc, 0x1b, 0x16, 0x16]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x1, 0x6, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x8}, {0x3, 0x8}, {0x5, 0x9}, {}, {0x0, 0x7}, {0x0, 0x7}, {0x7}, {0x4, 0x8}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x9, 0x7f, 0xd76d, 0x5, 0x6, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x5, 0x2, 0x36, 0x60, 0xb, 0x9, 0x3, 0x3, 0x1, 0x1, 0x30, 0x36]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x5}, {0x6, 0x1}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x3}, {0x6}, {0x7, 0xa}, {0x7, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x3, 0x1}, {0x2, 0x9}, {0x2, 0x2}, {0x6, 0x7}, {0x7, 0x7}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x30, 0x3, 0x2, 0x3, 0x23, 0x3, 0x16, 0x60, 0x1b, 0x36, 0x22, 0x6, 0xc, 0x2, 0x1b, 0x18, 0x30, 0xb, 0x12, 0x30, 0x16, 0xe78bc9bfb4907760, 0xc, 0x4, 0x48, 0xc, 0xc, 0x36, 0x18]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x6c, 0x2, 0x30, 0xc, 0x18, 0xc, 0x4, 0x36, 0x30, 0x2, 0x1, 0x1b, 0x36, 0x1b, 0x6, 0x9, 0x16, 0x24, 0x6c]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xfff9, 0x3, 0x5f1, 0x2179, 0x4, 0x1f, 0x4]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x16, 0x60, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x16, 0x9, 0xc, 0x30, 0x2, 0x24, 0x0, 0x4b, 0x36, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x6, 0x200, 0x8, 0x8, 0x4, 0x1000, 0x4]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbbc7, 0x9, 0x40, 0x20, 0x1, 0x0, 0x7ac, 0x72d6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd45d, 0x4, 0x6, 0x5, 0xe1, 0xfff, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x9, 0x2, 0x3, 0x12, 0x16, 0x9, 0x60, 0x60, 0x24, 0x38, 0x4, 0x1, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x5}, {0x3, 0x7}, {0x2}, {0x0, 0x4}, {0x1}, {0x7, 0x4}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x7}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x2, 0x6}, {0x5, 0xa}, {0x7, 0x2}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0x1}, {0x4, 0x4}, {0x3, 0x1}, {0x3, 0x6}, {0x6, 0x2}, {0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x7, 0x5}, {0x2, 0x2}, {}, {0x4, 0x7}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x7}, {0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x5}, {}, {0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x4}, {0x2, 0x2}, {0x2, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x5, 0xa}, {0x7}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x8}, {0x7}, {0x2, 0x4}, {0x6, 0x2}, {0x3, 0x1}, {0x0, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x3, 0xa}, {0x2, 0x3}, {0x5, 0x9}, {0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x9}, {0x6, 0xa}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x2, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x4, 0xa}, {0x5, 0x9}, {0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0xa}, {0x1}, {0x4, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x6}, {0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x2}, {0x2, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x2}, {0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x1}, {0x0, 0x4}, {0x4, 0x4}]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x600, 0x80, 0x3, 0x2, 0x83, 0x1, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x2, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x573e, 0x9faa, 0x6e2, 0x0, 0x9, 0x5, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffff5e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf000, 0x0, 0xaa9, 0x7, 0x6, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x9, 0x24, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0x3, 0x7, 0x400, 0x5127, 0x3f, 0x800, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x4}, {0x5, 0x2}, {}, {0x6, 0xa}, {0x2, 0x4}, {0x6, 0x5}, {0x7}, {0x3, 0x2}, {0x1, 0x1}, {0x7}, {0x0, 0x8}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x3, 0x8}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x6}, {0x3, 0x6}, {0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x24, 0xb, 0x4, 0x60, 0xc, 0x2, 0x18, 0x4, 0x30, 0x0, 0x1, 0x1b, 0x48, 0x12, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x81, 0x8001, 0xe000, 0x4, 0x5, 0x1000]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x6, 0x1, 0x48, 0x1, 0x0, 0x6c, 0x18, 0x1b, 0x12, 0x18, 0x5, 0x3, 0x6c, 0xb, 0x60, 0x5, 0x1, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x6}, {0x2, 0x7}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x2}, {}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x5}, {0x7, 0xa}, {0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x3, 0x9}, {0x2}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x4, 0x9}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0x1}, {0x5, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x2}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xcfd5, 0x1, 0x9, 0x0, 0x39c, 0x2, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x24, 0x17, 0x5, 0x48, 0x60, 0x12, 0x16, 0xb, 0x6, 0x60, 0x48, 0x3]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x3, 0x1, 0x6c, 0x60, 0x1, 0x5, 0x50, 0x5, 0x60, 0x6c, 0x18, 0x60, 0x0, 0x48, 0x60, 0x9, 0x24, 0x7, 0x24, 0x3c, 0x9, 0x18, 0x24, 0x2, 0x12, 0x4, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x618}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x76c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x98}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20040810) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40051}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000b80), 0x8, 0x400600) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x18000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x35}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x20040001) bind$bt_hci(r0, &(0x7f0000000d80)={0x1f, 0x3, 0x2}, 0x6) r7 = socket(0x6, 0x6, 0x4) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x90, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ec}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4e}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x42}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8080}, 0x4010) r8 = socket(0x22, 0xa, 0x7) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, r9, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20044805) [ 113.349275] audit: type=1400 audit(1749533327.677:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:28:47 executing program 3: io_uring_setup(0x37c8, &(0x7f0000000000)={0x0, 0xc92a, 0x10, 0x0, 0xe8}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb1ea936ccf323540}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0xa09, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000045) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200)=0xfffffff9, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x26}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1a9}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20080) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffff80, 0x2f}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000881) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x881) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xd05164332e21f050}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x890}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1f, 0x5b}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r4 = socket(0x5, 0x4, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x13, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r5 = socket(0x2e, 0x2, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x14c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7fff]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008041}, 0x50) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4014) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x2040000) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x786}, @SEG6_ATTR_SECRET={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40005) 05:28:47 executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x2, &(0x7f0000000000)={0x77359400}}, 0x198d) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0x80) mq_open(&(0x7f0000000140)='((\x82:}$)$-/\x00', 0x40, 0x4, &(0x7f0000000180)={0x5, 0x0, 0x8, 0x8}) mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x10, &(0x7f0000000200)={0x616, 0x5, 0xffffffff, 0x9}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x2400, 0x0) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000002c0)) mq_open(&(0x7f00000003c0)='\x00', 0x40, 0x3, &(0x7f0000000400)={0x3, 0xffff, 0x4, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x23}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1e}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000001e}, 0x8840) r3 = clone3(&(0x7f00000007c0)={0x8108000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x28}, &(0x7f0000000640)=""/166, 0xa6, &(0x7f0000000700)=""/114, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r1}}, 0x58) write$cgroup_pid(r1, &(0x7f0000000840)=r3, 0x12) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x45}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3f}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) getpeername(r1, &(0x7f0000000a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f0000000b00)=0x80) syz_io_uring_setup(0x52f6, &(0x7f0000000b40)={0x0, 0xa7ca, 0x1, 0x0, 0x233, 0x0, r1}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000c80)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)='./file0\x00', 0x18, 0x280000, 0x31713}, 0x8) 05:28:47 executing program 6: sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000c005) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000100)={0x838, 0x7, 0x0, 0x6, 0xffffffffffffffe1, 0x7}) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)='./file0\x00', 0x1, 0x400, 0x0, {0x0, r0}}, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f00000002c0), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000300), 0x4) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setfsgid(r1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r3) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x100]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x308bb31a}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffff00}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004089}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000580), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x11) ioctl$TCXONC(r3, 0x540a, 0x2) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000040) getpeername(r2, &(0x7f00000007c0)=@generic, &(0x7f0000000840)=0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x6801000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xe4c}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc008085}, 0x14000) 05:28:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d0, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c63eccf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e40}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf22e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58d2043}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5005}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x115afbed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28f47e7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7981}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ad9cd51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f2df8ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8b4}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fce044a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x224e9174}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ccf6734}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x195f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe3dd2c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d3f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e2f631f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2228cea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57198f7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23b0c5d9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47559a92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a297803}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15a64805}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c84dc9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f8c4441}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f8899ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x436e639a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32f2d28f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68766ad2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb904654}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe818}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4013dd0d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x230c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d8a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0xffd8af153d88763e}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x6310d41f0547f6b0, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x208, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5498316d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43e46094}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16c14d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43f7b5ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4966e73f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3d566d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x594c20f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1216b551}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46edf8a4}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x60, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa30c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8503}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74edb22a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d0dc92c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93ca}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x646f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f6cbdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b571193}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69be565e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x766c6647}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d2620f2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9da00d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37385cd8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7488e84e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x140c4875}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6afc0fbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x368721a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6543d021}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39d7ed1c}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x525eeb4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79cdbb2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe42278f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x493b071f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55c7af8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fde587f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x147cf4a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44ed6ee6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26e523d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x148f1b55}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004044) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x117}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c0) r4 = socket(0x2, 0x0, 0x8000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4c001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d00), 0x111080, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x80000001}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="27fcaae481275ebea958d69e07a4cec1f58ab1763cb24308da"}, @NL80211_ATTR_PMKID={0x14, 0x55, "ac4cfcd27e37dfd43c879b460fc2de68"}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x108, 0x4, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4537552d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x21f7d2b0}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b927586}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7de1af8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a2ad2ca}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000800}, 0x40408c0) r7 = socket(0x5, 0x2, 0x8001) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x60}, 0x4080) getpeername(r6, &(0x7f0000001180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000001200)=0x80) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000000) 05:28:47 executing program 7: sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x1]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x101, 0x9]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4020810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8a0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0xe, 0x6, 0x505, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x881) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x18000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x4, 0x79, 0x1, 0x3ff, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8000, 0x700, 0x1f, 0xffffffff}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x5c}}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0xf) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa0d00000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan0\x00'}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980), 0x20600, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r7 = socket(0x1d, 0x3, 0x100) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40080) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000c40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}}, 0x14}}, 0x20000881) [ 114.673618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.677677] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.683077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.685706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.693125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.696130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.699208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.705228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.716085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.725081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.794873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.799243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.801621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.809067] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.814225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.876389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.879167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.881339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.896391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.900339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.965438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.976454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.991433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.994602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.996911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.002695] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.007960] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.011073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.012494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.027079] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.034373] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.043250] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.055549] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.064056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.074723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.079420] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.105314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.127710] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.134085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.188401] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.746619] Bluetooth: hci1: command tx timeout [ 116.810862] Bluetooth: hci0: command tx timeout [ 116.875869] Bluetooth: hci2: command tx timeout [ 116.938851] Bluetooth: hci3: command tx timeout [ 117.066925] Bluetooth: hci5: command tx timeout [ 117.194893] Bluetooth: hci4: command tx timeout [ 117.259114] Bluetooth: hci6: command tx timeout [ 117.323074] Bluetooth: hci7: command tx timeout [ 118.794465] Bluetooth: hci1: command tx timeout [ 118.858837] Bluetooth: hci0: command tx timeout [ 118.922814] Bluetooth: hci2: command tx timeout [ 118.987838] Bluetooth: hci3: command tx timeout [ 119.115138] Bluetooth: hci5: command tx timeout [ 119.242498] Bluetooth: hci4: command tx timeout [ 119.307110] Bluetooth: hci6: command tx timeout [ 119.370799] Bluetooth: hci7: command tx timeout [ 120.842055] Bluetooth: hci1: command tx timeout [ 120.906059] Bluetooth: hci0: command tx timeout [ 120.969873] Bluetooth: hci2: command tx timeout [ 121.034188] Bluetooth: hci3: command tx timeout [ 121.161848] Bluetooth: hci5: command tx timeout [ 121.290480] Bluetooth: hci4: command tx timeout [ 121.353884] Bluetooth: hci6: command tx timeout [ 121.417855] Bluetooth: hci7: command tx timeout [ 122.889905] Bluetooth: hci1: command tx timeout [ 122.954133] Bluetooth: hci0: command tx timeout [ 123.017861] Bluetooth: hci2: command tx timeout [ 123.084048] Bluetooth: hci3: command tx timeout [ 123.210047] Bluetooth: hci5: command tx timeout [ 123.338847] Bluetooth: hci4: command tx timeout [ 123.402089] Bluetooth: hci6: command tx timeout [ 123.465921] Bluetooth: hci7: command tx timeout [ 177.402368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.407703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.414028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.422656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.433458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.582831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.586655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.591663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.601442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.605011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.609536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.611879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.633359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.660492] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.669363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.692733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.694114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.705228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.706536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.707690] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.723758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.724729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.725687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.730107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.738332] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.739745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.743613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.746676] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.750472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.755143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.757267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.766928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.768117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.769245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.774388] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.777643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.778519] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.787388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.795531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.807023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.466188] Bluetooth: hci0: command tx timeout [ 179.721945] Bluetooth: hci1: command tx timeout [ 179.914845] Bluetooth: hci3: command tx timeout [ 179.978146] Bluetooth: hci7: command tx timeout [ 179.978961] Bluetooth: hci6: command tx timeout [ 179.979615] Bluetooth: hci4: command tx timeout [ 179.979870] Bluetooth: hci5: command tx timeout [ 179.980516] Bluetooth: hci2: command tx timeout [ 181.515904] Bluetooth: hci0: command tx timeout [ 181.769856] Bluetooth: hci1: command tx timeout [ 181.961897] Bluetooth: hci3: command tx timeout [ 182.028051] Bluetooth: hci2: command tx timeout [ 182.028532] Bluetooth: hci4: command tx timeout [ 182.029991] Bluetooth: hci6: command tx timeout [ 182.030395] Bluetooth: hci5: command tx timeout [ 182.030953] Bluetooth: hci7: command tx timeout [ 183.561857] Bluetooth: hci0: command tx timeout [ 183.817969] Bluetooth: hci1: command tx timeout [ 184.009918] Bluetooth: hci3: command tx timeout [ 184.075456] Bluetooth: hci4: command tx timeout [ 184.075928] Bluetooth: hci7: command tx timeout [ 184.076351] Bluetooth: hci5: command tx timeout [ 184.076851] Bluetooth: hci6: command tx timeout [ 184.077281] Bluetooth: hci2: command tx timeout [ 185.610086] Bluetooth: hci0: command tx timeout [ 185.865982] Bluetooth: hci1: command tx timeout [ 186.058032] Bluetooth: hci3: command tx timeout [ 186.121908] Bluetooth: hci6: command tx timeout [ 186.122357] Bluetooth: hci7: command tx timeout [ 186.122757] Bluetooth: hci4: command tx timeout [ 186.124052] Bluetooth: hci2: command tx timeout [ 186.124369] Bluetooth: hci5: command tx timeout [ 239.640432] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.645328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.655460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.661141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.667646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.831339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.834672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.837635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.842086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.845693] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.922410] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.938752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.941217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.957440] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.964202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.982968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.993236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.009696] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.041430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.052142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.060403] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.063189] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.065434] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.074436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.075823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.078517] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.082099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.083638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.093680] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.101753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.104978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.112358] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.125671] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.146331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.150053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.153385] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.154685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.169101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.170722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.213274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.738039] Bluetooth: hci0: command tx timeout [ 241.931939] Bluetooth: hci1: command tx timeout [ 242.059098] Bluetooth: hci2: command tx timeout [ 242.187910] Bluetooth: hci4: command tx timeout [ 242.188651] Bluetooth: hci3: command tx timeout [ 242.250203] Bluetooth: hci6: command tx timeout [ 242.314199] Bluetooth: hci7: command tx timeout [ 242.378930] Bluetooth: hci5: command tx timeout [ 243.787034] Bluetooth: hci0: command tx timeout [ 243.979888] Bluetooth: hci1: command tx timeout [ 244.105900] Bluetooth: hci2: command tx timeout [ 244.234039] Bluetooth: hci3: command tx timeout [ 244.234987] Bluetooth: hci4: command tx timeout [ 244.300588] Bluetooth: hci6: command tx timeout [ 244.362215] Bluetooth: hci7: command tx timeout [ 244.426119] Bluetooth: hci5: command tx timeout [ 245.834207] Bluetooth: hci0: command tx timeout [ 246.025886] Bluetooth: hci1: command tx timeout [ 246.153926] Bluetooth: hci2: command tx timeout [ 246.283882] Bluetooth: hci4: command tx timeout [ 246.284472] Bluetooth: hci3: command tx timeout [ 246.345987] Bluetooth: hci6: command tx timeout [ 246.409864] Bluetooth: hci7: command tx timeout [ 246.475001] Bluetooth: hci5: command tx timeout [ 247.882836] Bluetooth: hci0: command tx timeout [ 248.074121] Bluetooth: hci1: command tx timeout [ 248.201864] Bluetooth: hci2: command tx timeout [ 248.330093] Bluetooth: hci3: command tx timeout [ 248.330605] Bluetooth: hci4: command tx timeout [ 248.394189] Bluetooth: hci6: command tx timeout [ 248.457849] Bluetooth: hci7: command tx timeout [ 248.522659] Bluetooth: hci5: command tx timeout [ 302.112082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.115893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.120274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.128002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.134569] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.252835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.262204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.279526] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.281716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.283964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.287489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.292424] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.313049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.316505] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.327970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.472092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.495433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.498433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.516297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.523351] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.524820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.549108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.569143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.573447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.586693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.594289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.598059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.633175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.637189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.640522] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.645014] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.684548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.706250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.716618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.718468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.736101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.764409] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.766439] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.772393] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.783216] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.203017] Bluetooth: hci0: command tx timeout [ 304.393905] Bluetooth: hci2: command tx timeout [ 304.395333] Bluetooth: hci1: command tx timeout [ 304.713988] Bluetooth: hci6: command tx timeout [ 304.715292] Bluetooth: hci4: command tx timeout [ 304.777871] Bluetooth: hci3: command tx timeout [ 304.841875] Bluetooth: hci5: command tx timeout [ 304.842897] Bluetooth: hci7: command tx timeout [ 306.252339] Bluetooth: hci0: command tx timeout [ 306.443246] Bluetooth: hci1: command tx timeout [ 306.443749] Bluetooth: hci2: command tx timeout [ 306.762502] Bluetooth: hci6: command tx timeout [ 306.763426] Bluetooth: hci4: command tx timeout [ 306.827922] Bluetooth: hci3: command tx timeout [ 306.889976] Bluetooth: hci7: command tx timeout [ 306.890835] Bluetooth: hci5: command tx timeout [ 308.298280] Bluetooth: hci0: command tx timeout [ 308.489930] Bluetooth: hci2: command tx timeout [ 308.490501] Bluetooth: hci1: command tx timeout [ 308.812883] Bluetooth: hci4: command tx timeout [ 308.813371] Bluetooth: hci6: command tx timeout [ 308.876137] Bluetooth: hci3: command tx timeout [ 308.939138] Bluetooth: hci5: command tx timeout [ 308.939582] Bluetooth: hci7: command tx timeout [ 310.346249] Bluetooth: hci0: command tx timeout [ 310.538230] Bluetooth: hci2: command tx timeout [ 310.538709] Bluetooth: hci1: command tx timeout [ 310.858056] Bluetooth: hci6: command tx timeout [ 310.858544] Bluetooth: hci4: command tx timeout [ 310.922824] Bluetooth: hci3: command tx timeout [ 310.985893] Bluetooth: hci7: command tx timeout [ 310.986342] Bluetooth: hci5: command tx timeout [ 364.892146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.902701] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.911184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.923496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.933434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.028370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.038593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.041979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.052975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.057206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.240400] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.246425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.254339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.271480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.282353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.351638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.354522] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.356698] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.361336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.364605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.443114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.445591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.447975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.458166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.463392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.531186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.568116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.574999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.637407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.654382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.819909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.835035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.852019] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.908000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.982085] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.021407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.029285] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.031688] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.051567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.059242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.985944] Bluetooth: hci0: command tx timeout [ 367.116956] Bluetooth: hci1: command tx timeout [ 367.370104] Bluetooth: hci2: command tx timeout [ 367.433840] Bluetooth: hci3: command tx timeout [ 367.817864] Bluetooth: hci4: command tx timeout [ 367.946992] Bluetooth: hci5: command tx timeout [ 368.139095] Bluetooth: hci7: command tx timeout [ 368.265934] Bluetooth: hci6: command tx timeout [ 369.034961] Bluetooth: hci0: command tx timeout [ 369.164534] Bluetooth: hci1: command tx timeout [ 369.418379] Bluetooth: hci2: command tx timeout [ 369.481979] Bluetooth: hci3: command tx timeout [ 369.867028] Bluetooth: hci4: command tx timeout [ 369.993829] Bluetooth: hci5: command tx timeout [ 370.186057] Bluetooth: hci7: command tx timeout [ 370.314013] Bluetooth: hci6: command tx timeout [ 371.081937] Bluetooth: hci0: command tx timeout [ 371.210027] Bluetooth: hci1: command tx timeout [ 371.465892] Bluetooth: hci2: command tx timeout [ 371.529859] Bluetooth: hci3: command tx timeout [ 371.914158] Bluetooth: hci4: command tx timeout [ 372.043050] Bluetooth: hci5: command tx timeout [ 372.233832] Bluetooth: hci7: command tx timeout [ 372.361955] Bluetooth: hci6: command tx timeout [ 373.129876] Bluetooth: hci0: command tx timeout [ 373.257872] Bluetooth: hci1: command tx timeout [ 373.514848] Bluetooth: hci2: command tx timeout [ 373.577888] Bluetooth: hci3: command tx timeout [ 373.962001] Bluetooth: hci4: command tx timeout [ 374.089844] Bluetooth: hci5: command tx timeout [ 374.283166] Bluetooth: hci7: command tx timeout [ 374.410804] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:33:48 Registers: info registers vcpu 0 RAX=ffff888032047908 RBX=ffff8880320478d0 RCX=ffffffff84ac0698 RDX=ffff888035f40000 RSI=ffffffff84ac074d RDI=0000000000000007 RBP=dffffc0000000000 RSP=ffff8880320477a0 R8 =0000000000000001 R9 =ffff888032047e30 R10=ffff888030f8721e R11=0000000000000001 R12=ffff888030f87200 R13=ffffed1006408f21 R14=ffff88803204790d R15=0000000000000002 RIP=ffffffff84ac0752 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd1266d3260 CR3=00000000277a4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880375c1b80 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81a5bb0a RDI=fffffbfff0ba07ec RBP=ffffffff85d03f60 RSP=ffff8880326078a0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000246 RIP=ffffffff8151b202 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd102c04540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7111333260 CR3=000000002da1e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000