Warning: Permanently added '[localhost]:21739' (ECDSA) to the list of known hosts. 2024/11/12 04:08:01 fuzzer started 2024/11/12 04:08:01 dialing manager at localhost:46317 syzkaller login: [ 68.911155] cgroup: Unknown subsys name 'net' [ 69.093598] cgroup: Unknown subsys name 'cpuset' [ 69.134615] cgroup: Unknown subsys name 'rlimit' 2024/11/12 04:08:19 syscalls: 211 2024/11/12 04:08:19 code coverage: enabled 2024/11/12 04:08:19 comparison tracing: enabled 2024/11/12 04:08:19 extra coverage: enabled 2024/11/12 04:08:19 setuid sandbox: enabled 2024/11/12 04:08:19 namespace sandbox: enabled 2024/11/12 04:08:19 Android sandbox: enabled 2024/11/12 04:08:19 fault injection: enabled 2024/11/12 04:08:19 leak checking: enabled 2024/11/12 04:08:19 net packet injection: enabled 2024/11/12 04:08:19 net device setup: enabled 2024/11/12 04:08:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/12 04:08:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/12 04:08:19 USB emulation: enabled 2024/11/12 04:08:19 hci packet injection: enabled 2024/11/12 04:08:19 wifi device emulation: enabled 2024/11/12 04:08:19 802.15.4 emulation: enabled 2024/11/12 04:08:19 fetching corpus: 0, signal 0/0 (executing program) 2024/11/12 04:08:21 starting 8 fuzzer processes 04:08:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socketpair(0x9, 0x2, 0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4850) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004840}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x228, 0x0, 0x500, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x379e, @private1, 0x179}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d420914}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1a8, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x926}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcfe1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaf800e9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd0}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbf4e}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4004044}, 0x840) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2c004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000f80), r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'syztnl0\x00', 0x0, 0x4, 0x4b, 0xfd, 0x7, 0x2, @private2, @mcast1, 0x10, 0x40, 0xae, 0x82}}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xd0, r8, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40010}, 0x24040040) [ 87.434657] audit: type=1400 audit(1731384501.180:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:08:21 executing program 1: pidfd_open(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xf, 0x8, 0x42, @private2, @remote, 0x7, 0x10, 0xffff, 0x3}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0xa3, 0x2, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x10, 0x7800, 0xf54, 0x5}}) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000180)=0xffffff88, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x3b, 0x58, 0x7f, 0x7fffffff, 0x0, @mcast1, @mcast2, 0x1, 0x10, 0x20c, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x2f, 0x0, 0x36, 0x3ff, 0x0, @local, @empty, 0x8, 0x7, 0xa369, 0x8}}) socketpair(0x1a, 0x80000, 0x1f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x0, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8, 0x700, 0x4, 0x1}}) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f8, 0x0, 0x1, 0x70bd28, 0xd402, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3d4fa24f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x70, 0x3, "2bd79850230ab53851d6088f93b03bfa90dc1fb1ddc9ffd96e890f12114ddd34b7f6177e30b1c9f2e4d54d13f0a7e28ec8ae0be1195d8348020c3cc502034c4e1317d521346b93fdd675a6d5749c9640d15ca254d75b8292aef3d45831847fd1e9921ad906c40608639aace3"}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8a41}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "41fe414dffac5c867f792c9c09919cf4c5db6b489e896753c1679f9986a0d0c67005d417"}}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000700), &(0x7f0000000740)=0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000800)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl1\x00', r7, 0x29, 0x7, 0x3f, 0xac, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x10, 0x1, 0x3}}) socketpair(0xb, 0x1, 0x610, &(0x7f0000000900)={0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000017c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a00)={0xd5c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xd24, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5007d8fde41bc9b2cc4de80690f5c40dd22e8a3d3e7607bf70412c5f2eda000e"}]}, {0x324, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "88c483756facf5a0753b87f22034131c72d37855ca72d5dfe877e62a245cb971"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "689482b4d8167e9f67741c9dd89cc31e27533931b0c74af6dab993d9b46ff964"}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xd6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x4a4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dfde4e0530171c8fff17c030d7d84926908eff82c9ea04bea6cdc418394e24ad"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x20, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x1a4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @loopback, 0x7f}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6d4b}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e8917cc76763b44c6332b25d5836de235668babc6bc8fb5ea0b420150c8666ba"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @mcast2, 0x8001}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1b3}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x240, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xd5c}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 04:08:21 executing program 2: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x3, 0x2, 0x1, 0xffffffff, 0x7fffffff, 0x1}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0xb5) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040804}, 0x4004844) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x20, 0x9, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8000, 0xfffffff9}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x440a0}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000c001}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000700)) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000740)={0x2, 0xffffffff, 0x8, 0x400, 0x4, 0x1f}) r7 = syz_open_dev$sg(&(0x7f0000000780), 0x80000001, 0x40002) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f00000007c0)=0x7) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x20000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r8, 0x2287, &(0x7f0000000840)=0x2) 04:08:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000091}, 0x800) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/time\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x600, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xb1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xe50b, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x81) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000540)) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x1f565b8e, 0x46}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x6c}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r5) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004080}, 0x8800) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x500, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20044010) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x6, 0x3, 0x48, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x20, 0x0, 0xfffffffa}}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3d}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x20}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40804) 04:08:21 executing program 4: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4679ce33}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xbe7}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcadb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5b}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000010}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc1f}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xae4c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8011}, 0x40) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8010040}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r3, 0x500, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x64}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4050814}, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r0, 0x4, 0xff, 0x5, 0x1000, 0xaf946c1198bef84e, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x40, 0x7800, 0x101, 0x1000}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', r5, 0x2f, 0x6, 0x5, 0x0, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x20, 0x80, 0x80, 0xb81}}) socketpair(0x3, 0x6, 0x7, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x81400201}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x20004050) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x4, 0xf9, 0xff, 0x3, 0x11, @mcast2, @remote, 0x0, 0x1, 0x8, 0x8}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000f40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c00)={0x2d8, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffeab5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x90}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcd5b}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xba}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4004801}, 0x40) 04:08:21 executing program 5: ioperm(0x20, 0x3, 0x20) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xb1) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000080)=0x10000) write$P9_RWALK(r0, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x8, 0x0, 0x2b1}, {0x20, 0x3, 0x6}, {0x4, 0x0, 0x6}, {0x2, 0x2}, {0x10, 0x2, 0x8}]}}, 0x4a) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000280)=0x4) socketpair(0x1a, 0x808, 0xfffffff9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000001440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000000340)={0x10b8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1050, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b8e0e7f374a10a9cc9edd3b5726da768cb5fadbe0174e6bb701799047db5c6a7"}}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x91}]}]}, 0x10b8}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x9c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x63}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4d}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48810}, 0x4000000) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x1000, 0x1ac41) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000001640)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001680)={0x8001, 0x0, 0x4, 0x9}) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000016c0)={0x1, 0x3, 0x8, 0x1, 0x4, 0x9}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x20}}, 0x4000880) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 04:08:21 executing program 6: sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x70}}, 0x402c081) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x1, 0x6, 0x77, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8000, 0x7, 0x80, 0x27}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x0, 0x4, 0x81, 0x12, @mcast2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80, 0x40, 0x8, 0x18}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x2f, 0x6, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x7800, 0x700, 0x1, 0x1ff}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x298, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf9ca}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3734e645}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x8000}, 0x8084) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40841) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x402, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48840) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20040010) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'ip6gre0\x00', r1, 0x29, 0x4, 0xea, 0xd4, 0x17, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x30}, 0x8, 0x8000, 0x1, 0x76}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'syztnl2\x00', r3, 0x4, 0x8, 0x4b, 0x3, 0xd, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x10, 0x48000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'ip6tnl0\x00', r6, 0x2f, 0x1f, 0x1, 0x9, 0x9077cb8f2cae965, @empty, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x10, 0x2}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x1f}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x0, 0x501, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001180)={'syztnl1\x00', &(0x7f0000001100)={'syztnl0\x00', r5, 0x2f, 0x0, 0x4, 0xfffffffc, 0x5a, @empty, @rand_addr=' \x01\x00', 0x8, 0x8040, 0xffffffff, 0x6}}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001200), r4) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x78, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0x7}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 04:08:21 executing program 7: write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x8, 0x3, 0x2}}, 0x14) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x2, 0x4, 0x4}}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x59, 0x9, 0x58e9, 0x18, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x1, 0x5, 0x3e8}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xf9, 0x8, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x80, 0x8, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x4, 0x6, 0x5, 0x101, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, 0x80, 0x8000, 0xede0}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x3f, 0x7ff, 0x2a, @mcast2, @private0, 0x7, 0x80, 0x5, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000400)={0x470, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x31}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x85}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd5f9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x4004880}, 0x8084) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3a06}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "8e7b3bea059ad48156af0d8e325c119e"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x8080) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80), 0x1, 0x0) ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000bc0)=0xe7) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'syztnl0\x00', r3, 0x8, 0x6, 0x7, 0xffffff99, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x700, 0x1, 0x9, 0x28}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000e80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x114, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000800) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f00), r7) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r10, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000814) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'ip6tnl0\x00', r3, 0x2f, 0x6, 0x0, 0xe95, 0x43, @mcast1, @loopback, 0x40, 0x0, 0xd0, 0xda6}}) [ 88.908411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.911521] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.914537] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.918367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.920716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.923724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.924646] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.928853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.930901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.936066] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.938699] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.940742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.960810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.962553] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.969210] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.971878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.975748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.980769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.983302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.984941] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.986058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.987892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.993071] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.997244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.036997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.043536] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.046859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.051431] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.056510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.058420] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.063758] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.066645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.068036] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.072200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.074992] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.077214] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.090214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.096554] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.096601] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.101728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.105615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.111876] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.114888] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.116865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.135521] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.146487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.167514] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.173164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.991226] Bluetooth: hci0: command tx timeout [ 90.991531] Bluetooth: hci1: command tx timeout [ 91.054501] Bluetooth: hci2: command tx timeout [ 91.054627] Bluetooth: hci3: command tx timeout [ 91.118351] Bluetooth: hci7: command tx timeout [ 91.182441] Bluetooth: hci4: command tx timeout [ 91.182744] Bluetooth: hci6: command tx timeout [ 91.246485] Bluetooth: hci5: command tx timeout [ 93.038394] Bluetooth: hci0: command tx timeout [ 93.039636] Bluetooth: hci1: command tx timeout [ 93.104324] Bluetooth: hci3: command tx timeout [ 93.104561] Bluetooth: hci2: command tx timeout [ 93.167350] Bluetooth: hci7: command tx timeout [ 93.230603] Bluetooth: hci4: command tx timeout [ 93.232041] Bluetooth: hci6: command tx timeout [ 93.296333] Bluetooth: hci5: command tx timeout [ 95.086448] Bluetooth: hci0: command tx timeout [ 95.087498] Bluetooth: hci1: command tx timeout [ 95.150364] Bluetooth: hci2: command tx timeout [ 95.151391] Bluetooth: hci3: command tx timeout [ 95.216301] Bluetooth: hci7: command tx timeout [ 95.278341] Bluetooth: hci6: command tx timeout [ 95.278379] Bluetooth: hci4: command tx timeout [ 95.343363] Bluetooth: hci5: command tx timeout [ 97.134401] Bluetooth: hci1: command tx timeout [ 97.135079] Bluetooth: hci0: command tx timeout [ 97.198506] Bluetooth: hci3: command tx timeout [ 97.198602] Bluetooth: hci2: command tx timeout [ 97.263345] Bluetooth: hci7: command tx timeout [ 97.326395] Bluetooth: hci4: command tx timeout [ 97.327346] Bluetooth: hci6: command tx timeout [ 97.390371] Bluetooth: hci5: command tx timeout [ 148.959813] syz-executor.4 (283) used greatest stack depth: 24496 bytes left [ 151.234123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.236683] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.242452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.246310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.248611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.250450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.493101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.495087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.496455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.504103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.506927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.508177] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.548971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.554990] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.561382] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.563854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.569952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.572044] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.573659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.577464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.579004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.581076] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.581970] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.583499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.587412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.588568] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.602771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.611202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.618530] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.621011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.626350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.630568] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.635744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.646591] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.646683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.648683] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.652220] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.656574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.661143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.668500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.674741] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.678661] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.680893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.702549] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.715547] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.723480] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.725443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.736652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.327371] Bluetooth: hci0: command tx timeout [ 153.583356] Bluetooth: hci1: command tx timeout [ 153.648517] Bluetooth: hci4: command tx timeout [ 153.648662] Bluetooth: hci3: command tx timeout [ 153.710369] Bluetooth: hci2: command tx timeout [ 153.711054] Bluetooth: hci7: command tx timeout [ 153.775326] Bluetooth: hci5: command tx timeout [ 153.838325] Bluetooth: hci6: command tx timeout [ 155.374556] Bluetooth: hci0: command tx timeout [ 155.631463] Bluetooth: hci1: command tx timeout [ 155.696296] Bluetooth: hci3: command tx timeout [ 155.696317] Bluetooth: hci4: command tx timeout [ 155.758525] Bluetooth: hci2: command tx timeout [ 155.759970] Bluetooth: hci7: command tx timeout [ 155.824312] Bluetooth: hci5: command tx timeout [ 155.886359] Bluetooth: hci6: command tx timeout [ 157.422469] Bluetooth: hci0: command tx timeout [ 157.678515] Bluetooth: hci1: command tx timeout [ 157.744292] Bluetooth: hci4: command tx timeout [ 157.744365] Bluetooth: hci3: command tx timeout [ 157.806478] Bluetooth: hci7: command tx timeout [ 157.806653] Bluetooth: hci2: command tx timeout [ 157.870499] Bluetooth: hci5: command tx timeout [ 157.934472] Bluetooth: hci6: command tx timeout [ 159.471369] Bluetooth: hci0: command tx timeout [ 159.729360] Bluetooth: hci1: command tx timeout [ 159.790331] Bluetooth: hci4: command tx timeout [ 159.790353] Bluetooth: hci3: command tx timeout [ 159.854372] Bluetooth: hci2: command tx timeout [ 159.854436] Bluetooth: hci7: command tx timeout [ 159.918505] Bluetooth: hci5: command tx timeout [ 159.983449] Bluetooth: hci6: command tx timeout [ 213.813555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.817351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.820191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.824520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.825789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.826867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.831573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.833568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.834874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.837970] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.843113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.845264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.847357] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.847628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.859464] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.881259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.884550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.888471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.890183] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.895455] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.901643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.904249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.906029] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.907907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.017168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.021198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.030089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.034249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.040709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.042671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.056142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.076616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.078755] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.086111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.089479] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.090981] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.094019] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.095293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.100304] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.102667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.105539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.108786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.135699] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.164665] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.168412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.177281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.194781] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.218487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.918391] Bluetooth: hci2: command tx timeout [ 215.919318] Bluetooth: hci0: command tx timeout [ 215.982349] Bluetooth: hci1: command tx timeout [ 215.987535] Bluetooth: hci3: command tx timeout [ 216.175506] Bluetooth: hci5: command tx timeout [ 216.176471] Bluetooth: hci4: command tx timeout [ 216.238438] Bluetooth: hci6: command tx timeout [ 216.367345] Bluetooth: hci7: command tx timeout [ 217.967462] Bluetooth: hci2: command tx timeout [ 217.968045] Bluetooth: hci0: command tx timeout [ 218.032275] Bluetooth: hci1: command tx timeout [ 218.032819] Bluetooth: hci3: command tx timeout [ 218.223352] Bluetooth: hci5: command tx timeout [ 218.223934] Bluetooth: hci4: command tx timeout [ 218.287351] Bluetooth: hci6: command tx timeout [ 218.414403] Bluetooth: hci7: command tx timeout [ 220.015263] Bluetooth: hci2: command tx timeout [ 220.015791] Bluetooth: hci0: command tx timeout [ 220.079524] Bluetooth: hci1: command tx timeout [ 220.081285] Bluetooth: hci3: command tx timeout [ 220.271517] Bluetooth: hci4: command tx timeout [ 220.272996] Bluetooth: hci5: command tx timeout [ 220.334335] Bluetooth: hci6: command tx timeout [ 220.462668] Bluetooth: hci7: command tx timeout [ 222.064141] Bluetooth: hci0: command tx timeout [ 222.064712] Bluetooth: hci2: command tx timeout [ 222.127426] Bluetooth: hci1: command tx timeout [ 222.127922] Bluetooth: hci3: command tx timeout [ 222.319338] Bluetooth: hci4: command tx timeout [ 222.319861] Bluetooth: hci5: command tx timeout [ 222.382389] Bluetooth: hci6: command tx timeout [ 222.511388] Bluetooth: hci7: command tx timeout [ 276.219456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.221661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.224702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.231099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.233587] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.235491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.410903] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.413595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.414891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.420991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.426114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.428093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.478476] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.482524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.484481] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.487688] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.502547] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.505703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.545985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.564716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.571619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.600746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.608021] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.618743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.620128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.638478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.644135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.659158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.663785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.664927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.745848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.746127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.758947] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.760927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.762395] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.772598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.774759] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.774861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.784360] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.815978] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.825131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.832474] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.835580] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.836348] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.843935] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.845041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.859883] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.863455] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.254881] Bluetooth: hci0: command tx timeout [ 278.511638] Bluetooth: hci1: command tx timeout [ 278.574302] Bluetooth: hci2: command tx timeout [ 278.705256] Bluetooth: hci3: command tx timeout [ 278.766504] Bluetooth: hci4: command tx timeout [ 278.895626] Bluetooth: hci7: command tx timeout [ 278.895891] Bluetooth: hci5: command tx timeout [ 278.959509] Bluetooth: hci6: command tx timeout [ 280.303811] Bluetooth: hci0: command tx timeout [ 280.559823] Bluetooth: hci1: command tx timeout [ 280.623279] Bluetooth: hci2: command tx timeout [ 280.750335] Bluetooth: hci3: command tx timeout [ 280.815442] Bluetooth: hci4: command tx timeout [ 280.942400] Bluetooth: hci7: command tx timeout [ 280.942422] Bluetooth: hci5: command tx timeout [ 281.006286] Bluetooth: hci6: command tx timeout [ 282.350309] Bluetooth: hci0: command tx timeout [ 282.606298] Bluetooth: hci1: command tx timeout [ 282.670283] Bluetooth: hci2: command tx timeout [ 282.803290] Bluetooth: hci3: command tx timeout [ 282.862291] Bluetooth: hci4: command tx timeout [ 282.990319] Bluetooth: hci5: command tx timeout [ 282.990495] Bluetooth: hci7: command tx timeout [ 283.056306] Bluetooth: hci6: command tx timeout [ 284.399306] Bluetooth: hci0: command tx timeout [ 284.655462] Bluetooth: hci1: command tx timeout [ 284.719336] Bluetooth: hci2: command tx timeout [ 284.847654] Bluetooth: hci3: command tx timeout [ 284.910307] Bluetooth: hci4: command tx timeout [ 285.038350] Bluetooth: hci7: command tx timeout [ 285.039353] Bluetooth: hci5: command tx timeout [ 285.102461] Bluetooth: hci6: command tx timeout [ 336.551918] syz-executor.7 (9732) used greatest stack depth: 24480 bytes left [ 338.498246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.502653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.503771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.507112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.510115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.512143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.681912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.685234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.691576] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.693045] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.696171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.698751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.700997] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.706848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.708014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.709104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.712911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.717605] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.722455] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.724611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.731525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.755483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.761085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.768517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.932016] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.944155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.952001] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.953906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.957324] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.960730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.963008] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.967388] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.970209] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.971821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.974088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.978467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.002526] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.004162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.017312] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.039308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.040035] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.048895] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.049956] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.051766] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.052822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.072010] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.073377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.079988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.527310] Bluetooth: hci0: command tx timeout [ 340.782820] Bluetooth: hci2: command tx timeout [ 340.783830] Bluetooth: hci1: command tx timeout [ 340.847371] Bluetooth: hci3: command tx timeout [ 341.049264] Bluetooth: hci7: command tx timeout [ 341.167329] Bluetooth: hci5: command tx timeout [ 341.168651] Bluetooth: hci4: command tx timeout [ 341.230483] Bluetooth: hci6: command tx timeout [ 342.575225] Bluetooth: hci0: command tx timeout [ 342.831357] Bluetooth: hci2: command tx timeout [ 342.832912] Bluetooth: hci1: command tx timeout [ 342.895384] Bluetooth: hci3: command tx timeout [ 343.089281] Bluetooth: hci7: command tx timeout [ 343.215408] Bluetooth: hci4: command tx timeout [ 343.215950] Bluetooth: hci5: command tx timeout [ 343.279406] Bluetooth: hci6: command tx timeout [ 344.624238] Bluetooth: hci0: command tx timeout [ 344.879280] Bluetooth: hci2: command tx timeout [ 344.880781] Bluetooth: hci1: command tx timeout [ 344.943401] Bluetooth: hci3: command tx timeout [ 345.135132] Bluetooth: hci7: command tx timeout [ 345.262592] Bluetooth: hci4: command tx timeout [ 345.263151] Bluetooth: hci5: command tx timeout [ 345.327290] Bluetooth: hci6: command tx timeout [ 346.671458] Bluetooth: hci0: command tx timeout [ 346.927457] Bluetooth: hci1: command tx timeout [ 346.928016] Bluetooth: hci2: command tx timeout [ 346.991319] Bluetooth: hci3: command tx timeout [ 347.182303] Bluetooth: hci7: command tx timeout [ 347.313261] Bluetooth: hci4: command tx timeout [ 347.313809] Bluetooth: hci5: command tx timeout [ 347.375456] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:13:30 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000023 RCX=ffffffff812f079e RDX=fffffbfff0fdc5e5 RSI=0000000000000008 RDI=ffffffff87ee2f20 RBP=ffff888015cd1b80 RSP=ffff88802e367870 R8 =0000000000000000 R9 =fffffbfff0fdc5e4 R10=ffffffff87ee2f27 R11=ffff88806ce40350 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff888015cd25e8 RIP=ffffffff812f07a6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd4e8e9e540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffda1877b18 CR3=0000000031830000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff8485c27f RDX=ffffed1001189d21 RSI=0000000000000004 RDI=ffff888008c4e900 RBP=ffff888008c4e900 RSP=ffff888032467918 R8 =0000000000000000 R9 =ffffed1001189d20 R10=ffff888008c4e903 R11=ffff88806cf40350 R12=1ffff1100648cf24 R13=0000000000000003 R14=ffffed1001189d20 R15=ffff888032467950 RIP=ffffffff8485c412 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5f7fde1540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe258d726f4 CR3=0000000027386000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000