Warning: Permanently added '[localhost]:53889' (ECDSA) to the list of known hosts. 2024/10/20 06:37:45 fuzzer started 2024/10/20 06:37:45 dialing manager at localhost:45639 syzkaller login: [ 67.882881] cgroup: Unknown subsys name 'net' [ 67.958957] cgroup: Unknown subsys name 'cpuset' [ 67.989817] cgroup: Unknown subsys name 'rlimit' 2024/10/20 06:38:02 syscalls: 203 2024/10/20 06:38:02 code coverage: enabled 2024/10/20 06:38:02 comparison tracing: enabled 2024/10/20 06:38:02 extra coverage: enabled 2024/10/20 06:38:02 setuid sandbox: enabled 2024/10/20 06:38:02 namespace sandbox: enabled 2024/10/20 06:38:02 Android sandbox: enabled 2024/10/20 06:38:02 fault injection: enabled 2024/10/20 06:38:02 leak checking: enabled 2024/10/20 06:38:02 net packet injection: enabled 2024/10/20 06:38:02 net device setup: enabled 2024/10/20 06:38:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/20 06:38:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/20 06:38:02 USB emulation: enabled 2024/10/20 06:38:02 hci packet injection: enabled 2024/10/20 06:38:02 wifi device emulation: enabled 2024/10/20 06:38:02 802.15.4 emulation: enabled 2024/10/20 06:38:02 fetching corpus: 0, signal 0/0 (executing program) 2024/10/20 06:38:04 starting 8 fuzzer processes 06:38:04 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x7, 0x9, @local, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x8, 0x3f, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', r0, 0x29, 0xfa, 0xff, 0x6529, 0x32, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x7f, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x2f, 0xf9, 0x1, 0xffffffff, 0x8, @remote, @private1, 0x20, 0x7880, 0x1, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r0, 0x4, 0x4, 0x7, 0x0, 0xb200bf96cacf9241, @mcast2, @empty, 0x700, 0x10, 0x8, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r2, 0x2f, 0x5, 0x5, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x88, 0x20, 0x80000000, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r3, 0x29, 0x0, 0x9, 0x3db, 0x4, @mcast1, @private2, 0x40, 0x40, 0x10000, 0x8001}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x2200, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000004c0)) ioctl$SNAPSHOT_FREE(r4, 0x3305) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000884}, 0x91) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl2\x00', r2, 0x4, 0x20, 0x3f, 0x7, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x700, 0x20, 0xcc, 0x9}}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x10, 0x70bd29, 0x6, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040041) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80005}, 0x4000000) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1e}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x50) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80), 0x20000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6gre0\x00', r5, 0x4, 0x1, 0x3, 0x3b2, 0x41, @dev={0xfe, 0x80, '\x00', 0x2d}, @loopback, 0x700, 0x700, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl0\x00', r9, 0x29, 0x6, 0x0, 0x1f, 0x52, @remote, @local, 0xa874b97e0ce38cd9, 0x17, 0xe392, 0x6}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x90, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004014}, 0x800) 06:38:04 executing program 1: semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x180800) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000000c0)=""/53) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4a6090a8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x5c}}, 0x8000) semctl$GETVAL(0xffffffffffffffff, 0x4, 0xc, &(0x7f0000000240)=""/100) r1 = semget$private(0x0, 0x4, 0x602) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000002c0)=""/50) semtimedop(r1, &(0x7f0000000300)=[{0x2, 0x14}, {0x2, 0x3ff, 0x1800}, {0x1, 0x81, 0x1800}, {0x3, 0x6, 0x1000}, {0x4, 0x7, 0x1800}, {0x4, 0xfffb, 0x800}, {0x2, 0x1, 0x800}, {0x1, 0x7}, {0x0, 0x6, 0x800}], 0x9, &(0x7f0000000340)={0x77359400}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1c4, r4, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xd}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x40, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x48000}, 0x4004810) r5 = socket(0x27, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4008004) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000008c0)=""/203) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x60004000}, 0x20004000) r7 = semget(0x0, 0x1, 0x0) semctl$IPC_INFO(r7, 0x0, 0x3, &(0x7f0000000b40)=""/202) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ab}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf4ba}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x8040) 06:38:04 executing program 2: r0 = socket(0x1f, 0x3, 0xffffd8a4) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x401, 0x4) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0x8, &(0x7f0000001540)=[{&(0x7f00000000c0)="b1a556daeb5d60068924c93d931cde9e2a9db2e04a693b954c30c4ca49866ae5ff2eaf74d16264f8c9275c349355911df221d1437b8fa109d8ebafd6862d82d40f89ebef83a26f60c9933e0ac2bbe405ee9b541faf0bc764db5d2a6526d2f20c721378f2b53420a1ffdb9393833baf04b63cc3d194431e2a2074a79421f0158a63f99dc265b4f01b619751a0145e2b72adc1152966b6282c86f1c2779fddd54dd17de96bdab5f069514a24db84545dc8006d542264a7dc8ff79142cad0f548bf37fa", 0xc2, 0xdc0}, {&(0x7f00000001c0)="376cbf1b84a57a319cadeb36c785c274400a2b741910d52a28131bac174145c6f248e9d28ded9a54a428c4d017d28c4e36cee1593616d1b297e525e3cf8a594e62b0b0b81f3652b3b42a6f03f613a4bfaa273690327d260b28c4b7a3d96262145de07d216249abd4fbc0f46daef65622ecbe642b83174ec12a9a05af9d782731e195e666d3bb40fb600291ba0df25e9bce9856eb1a66f397fe0204addebb8a1d3a31aad97e4b004176c1e7", 0xab, 0x3}, {&(0x7f0000000280)="e6131dc568dd4aeb083e0eb49e4d8e33c32db8ec9babb39649c330b3db7285ffb36ff0fb5af34b600e32f1ee014ac36c16e29e59f7522ed1340eae37fff73f575a50b9035b829d8402c0d80552b08d18a79735ab73aaa68026c2408093f47d1cedd17b8418512cae827822417e84b0cff83e92c165186160b43c44e97eb3becb7cc6421fcf12a6f0b037af3223ca4b2f0203e7", 0x93, 0x101}, {&(0x7f0000000340)="f4ee5772a34c72e81530918c96d870f6408fc2b84bdd022873b9429969c045a790a164e55a027e33abf82daca8d4be7cead7eda3524e4b1a561738ab9cb7dcfebe0b470e58980c29952b59c0081bdfd62ff2b8ac378188cc473d01399851dea286d3a4a516aa", 0x66, 0x7}, {&(0x7f00000003c0)="b18ccf6a848e32b1d935ef09e46cebf4e029be8b257a1108d3b7a3dc1e4e23f713576fbe9d2e6904a20b441b09ff12c4ea8f1b54281cb67988f6174bad874f7334ea41cb8232ee5c118c7cd5efc6bbaf22357f9a73a0a3a20a91d36dd85e979b875a9220a852a88e9a9391ae7e0854db096ae4b91d61851ccabb7b2c40ce52ca058668c502071c947c34974234ba8380a8c8f1fdf4bf94ef3afd666dc6d58604b5b397112c5b168d28f1ec1ab1de7dc35e5d336b8099ed2d64ee", 0xba, 0x3}, {&(0x7f0000000480)="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", 0x1000, 0x5}, {&(0x7f0000001480)="81e796975378ceac94d5c06d1abdc61005459d94fb24a274ae52c5a605922cc1aaf221edded1f80b109790af", 0x2c, 0xc1}, {&(0x7f00000014c0)="bd3350931f71343111b5a0037557cd96e4614fe13c49a67f468cac4f19ea1849d58b912060489fd163f58c02a970c0302fa8769af210b6adf59c5bbd844bb343aec9e94972988d823367a0b8a778073292db240db5ccbb824896dd7bfddfc353a96d83057c13ed62ec5674b6f9c2b523883537ca92852db386f2ff", 0x7b, 0x7ff}], 0x60042, &(0x7f0000001600)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x33, 0x6e, 0x35, 0x16, 0x32, 0x25, 0x38, 0x36, 0x31]}}, {@huge_never}, {@huge_always}, {@huge_always}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0xd}}, {@permit_directio}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001740)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r1, &(0x7f00000016c0)={0x200c0, 0x102, 0x1}, &(0x7f0000001700)='./file0\x00', 0x18, 0x0, 0x12345}, 0x17) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0xe1034df9816dfbdb}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000018c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48c0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001c00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x158, 0x0, 0x8265bbb252201678, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2949}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3539}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ffa}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xb6, @empty, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4044800}, 0x4805) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c40), 0x80000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}}, 0x24) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001e00)={'syztnl0\x00', &(0x7f0000001d80)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x1, 0x3, 0x41, @remote, @remote, 0x0, 0x7, 0x8, 0x7f}}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e40)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000001e80), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001f00)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x330, 0x330, 0x330, 0x330, 0x4, &(0x7f0000001ec0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff000000, 0xffffffff, 0xd, 0xa, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local, {[0xff, 0xff]}}, 0xffff, 0xfff, 0x1, 0x2, 0x80, 0x4, 'veth0_to_batadv\x00', 'wlan1\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @remote, @local, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) epoll_create(0x0) r5 = openat$cgroup(r3, &(0x7f0000002380)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f00000023c0), 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x94}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x40) 06:38:04 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8526}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040800}, 0x24000080) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x84}}, 0x20000840) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xa0}}, 0x20000001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffbff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x24810) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000680), &(0x7f00000006c0)=0x14) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='net_prio.prioidx\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) r6 = openat$cgroup_ro(r4, &(0x7f0000000880)='devices.list\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x28040045) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4004) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000001040)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000b40)={0x484, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9dd85b893f3cc5815d9b3b1a43068fc27c35aa09"}}, @TIPC_NLA_NODE_ID={0x26, 0x3, "2ad21062f08ef61181f8b64b634f70b202b7a123c1dd8c90a81323ed50ddfa66e20e"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ddca48f95cf70a9f552221c6951043361a36a84ae6da437166f3a17798"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "9231ed1a6013e4ae136206632e638fd66f0c6086f62d814db9db3b2908418fab33e0ca9313d653f40db842c203b139f0360595a45c258a9a09117a978d838bf40597fd87771ae05f43059f14f7e13f3c5336ba4ed11b3e0bb07940b24796159300db8807e6a07c17d488c01008405246a71e9abea666a5491d946e823809640cbd72c45f9bfbe5241b2958c4c48e711a89cd8362a08a1942d6751c99847d0d82ddbf933ec630a3b0d4f4753e47d45eccb158f351d22a0eecb0fdea978146c9d51cde82760289fa2c87ada1671ce33f5824c90850245f0d084da65fd56bcab46d517df5a5d4d0bc8b1bd34e8ee413"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x63, 0x3, "9d411a0afea86dde9ae16dc95b12335c61693a5a5a4dd03e140c849f998c06fdf1c092f1d3673777178a0a36265923df4300f51f9d6fe5043ed4a428868bbcfca0be321819b379294740ed38e93cd23fcf9a7d3fecee14d1ebae7909fbb427"}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "51dfbf2258e4c465b10aa725d92d9e1398c165b72349a3381c50ba12895d883b"}}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xde, 0x3, "382f200fb5271d36304f0b7ba6956bfe2676d5163d3d3917cffbe2b600ec7dbbe461366e141cd81422a66a417ab3f8628ddf3e964e603d8e6909a7083c2861f9b2121590258074f34cea281e33f8427af91f9f4c8413fa82cdefead2bb530b29d87fe411953ee8b60f68d1eba28dc8fe8fd5109382c4c3745b31aea30b98f5baefd6502dd118ccc43514038cfc37e7dd785138fad57d93f2e80cc74438999d1926aff454523082502d7e992317e63280283b590a4d736d65ff6e07b2d38fb1e3fbb3df99da013057c635c2e46bd21edb2e32fe93271c5eba8a9f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfdb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb82}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9c}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x4}, 0x8015) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, 'net_prio.prioidx\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4c881) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000011c0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 06:38:04 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0xd3, 0x8, 0x0, 0x2d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8, 0x7800, 0x2265b359, 0xfff}}) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) keyctl$session_to_parent(0x12) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109a00, 0x0) openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) epoll_create(0x2) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0xe, 0x0, 0x2, 0x9, 0x0, 0x9, 0x2000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x9, 0x6, 0x200, 0x0, 0x2, 0x4, 0x6c2, 0x0, 0x2}, r0, 0xd, 0xffffffffffffffff, 0x5) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3d1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd60e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x94}, 0x4000801) openat$cgroup_freezer_state(r0, &(0x7f0000000540), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x428080, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x90, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x89}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x51ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x496a}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8014) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x58}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffc0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4008000) [ 85.886869] audit: type=1400 audit(1729406284.429:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:38:04 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd_index=0x5, 0x2, 0x4, 0x0, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x20, 0x1f, 0x9, 0xfb, 0x0, 0x7, 0x20, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x4886, 0x8000, 0x7fff, 0x1, 0x6, 0x8, 0x2, 0x0, 0x81}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x38b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000811}, 0x50) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x504, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa38a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x4803) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x134, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd103}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000800}, 0x48000) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbc}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0xb62696edf0e87d4f}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xbc, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x42}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x9cd4, 0x0, 0x40, 0x5}]}) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x4) getpeername(r2, &(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000bc0)=0x80) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffff}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x68}}, 0x0) 06:38:04 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!]\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004804}, 0x81) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46ab3d6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r0, 0xe03, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1000, @private1, 0x8c1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @remote, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @private1, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8094) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004805}, 0xc800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x3, 0x1d0, {{0x29, 0x4, 0x2, 0x2d, 0xa4, 0x66, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local, {[@lsrr={0x83, 0x17, 0x17, [@private=0xa010101, @empty, @broadcast, @multicast1, @multicast2]}, @timestamp={0x44, 0x18, 0x2c, 0x0, 0x0, [0x6a, 0x1, 0x5, 0x81, 0x4]}, @generic={0x83, 0xf, "28908baddc44f4b2959321093c"}, @timestamp_prespec={0x44, 0x14, 0x1b, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x1}, {@multicast1, 0x8001}]}, @timestamp_prespec={0x44, 0x3c, 0x96, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffff}, {@rand_addr=0x64010101, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@loopback, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2}]}, @generic={0x94, 0x2}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4806000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa8, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}]}, 0xa8}}, 0x40100) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d00)={'syztnl2\x00', &(0x7f0000000c80)={'ip6gre0\x00', r6, 0x29, 0x40, 0x80, 0xeb, 0x3b30ba8038d0b155, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast1, 0x10, 0x10, 0x7, 0x80}}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000d80)={0x0, @ax25={0x3, @default, 0x1}, @can={0x1d, r7}, @isdn={0x22, 0x40, 0x5, 0x1, 0xcc}, 0x2, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000d40)='gretap0\x00', 0x7, 0xa4, 0x2}) semget$private(0x0, 0x4, 0x20) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xcc, r2, 0x4, 0x5, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x39}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc8a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x4000801) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000fc0)='@(}{&\x00') 06:38:04 executing program 7: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffe}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x240080ca) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8050}, 0x800) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f0000000400)=0x80) r3 = socket(0x11, 0x0, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x410, 0x130, 0x130, 0x240, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000440), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xaf, 0x4, 0xc95, 0x0, 0x0, "6e624c43c5ea708ae700e9c2e7e2fa5834983453cadb54dce390a311e514bd77b15e63a7d326b4c72f8546c5c13120951ef945ffb349921afab083c999a6d9c9"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2f}, 0x1, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x9, 0xb, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="3edd1f990de3", {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x8000, 0xc4b, 0x9, 0x7, 0x2, 'nr0\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x6, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000900)) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000980)={0x0, @generic={0x3, "60e213ad98b30606b523f9783324"}, @isdn={0x22, 0x70, 0x7f, 0x0, 0x2d}, @generic={0xb, "da7efcff396b7514bb10fc1f3547"}, 0x7, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000940)='vlan1\x00', 0x7, 0x3ff, 0x8}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r4, &(0x7f0000000a00)=@sco, &(0x7f0000000a80)=0x80, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000ac0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000ec0)={&(0x7f0000000b00), 0xc, &(0x7f0000000e80)={&(0x7f0000000b40)={0x324, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "108e35aadcefef201b1be8e8468a3f1aa1b8301a9769c606be7e79a84c84cdc921"}}, @TIPC_NLA_NODE_ID={0x12, 0x3, "a854d8e494b5b0557982f2061b7a"}, @TIPC_NLA_NODE_ID={0x2d, 0x3, "d50ba1c5e350242614c0b60393558a9e723bf622a67384db0795ba45283c34e3cef275f2bf30084bd5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "26aee0791de658fc980af27373d7c5d2c6b0c6ceafa7ba5d794359b0713bee54432a29"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f97e6b295e4e2bf6cfb8108a0eff95d293ad9620810d6a2b0f617e595a403aaf"}}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7eac}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x753c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x71, 0x3, "22ad2e869ab34c447b859d4f807b1c0b181c783400a9e276609c14b7f287ec94b8eb159e4b1008a711e8c1bc1e9f10e343b8226a0de0c8b70b6c74356298f26a2ea8ac7aec7dfaf44c347a9c84ad5b67a4acdedacde959e1cd435c312b4623533d704c8a54ef0c670d159c56d8"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x50000}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getpeername(0xffffffffffffffff, &(0x7f0000000f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000f80)=0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000001040)={'syztnl0\x00', &(0x7f0000000fc0)={'syztnl2\x00', 0x0, 0x2f, 0xed, 0x0, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x20, 0x10, 0x6, 0x40}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000010c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1}, 0x4) [ 87.360474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.367056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.369028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.373426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.375408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.377105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.378999] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.380874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.383971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.385051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.386761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.390565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.395984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.397512] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.399960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.410427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.425992] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.434575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.436214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.440042] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.441354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.443913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.444006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.444938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.448123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.448872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.452000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.459733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.498123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.502851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.503625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.507392] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.512143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.513630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.513668] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.515502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.516768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.521306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.522689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.526156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.527878] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.539133] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.552846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.565985] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.568126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.569851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.581253] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.589065] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.449240] Bluetooth: hci0: command tx timeout [ 89.513782] Bluetooth: hci2: command tx timeout [ 89.578758] Bluetooth: hci1: command tx timeout [ 89.641315] Bluetooth: hci5: command tx timeout [ 89.642169] Bluetooth: hci6: command tx timeout [ 89.643002] Bluetooth: hci7: command tx timeout [ 89.643311] Bluetooth: hci4: command tx timeout [ 89.644423] Bluetooth: hci3: command tx timeout [ 91.498185] Bluetooth: hci0: command tx timeout [ 91.561178] Bluetooth: hci2: command tx timeout [ 91.627746] Bluetooth: hci1: command tx timeout [ 91.703790] Bluetooth: hci7: command tx timeout [ 91.704276] Bluetooth: hci3: command tx timeout [ 91.705021] Bluetooth: hci6: command tx timeout [ 91.705479] Bluetooth: hci4: command tx timeout [ 91.705999] Bluetooth: hci5: command tx timeout [ 93.546089] Bluetooth: hci0: command tx timeout [ 93.609843] Bluetooth: hci2: command tx timeout [ 93.672775] Bluetooth: hci1: command tx timeout [ 93.738052] Bluetooth: hci5: command tx timeout [ 93.738594] Bluetooth: hci4: command tx timeout [ 93.738640] Bluetooth: hci6: command tx timeout [ 93.739236] Bluetooth: hci3: command tx timeout [ 93.739619] Bluetooth: hci7: command tx timeout [ 95.592851] Bluetooth: hci0: command tx timeout [ 95.658070] Bluetooth: hci2: command tx timeout [ 95.721896] Bluetooth: hci1: command tx timeout [ 95.784987] Bluetooth: hci5: command tx timeout [ 95.785080] Bluetooth: hci7: command tx timeout [ 95.785532] Bluetooth: hci3: command tx timeout [ 95.786584] Bluetooth: hci6: command tx timeout [ 95.786632] Bluetooth: hci4: command tx timeout [ 149.996449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.000800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.002035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.004471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.006886] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.008154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.070498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.072871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.074091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.078159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.079751] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.080965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.151724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.152932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.163090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.164050] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.165580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.165624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.166746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.169220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.170002] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.174330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.176844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.176949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.182767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.184450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.192247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.193309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.194582] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.211002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.217050] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.218123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.230323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.232143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.233314] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.237204] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.240205] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.248070] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.249239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.257931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.268962] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.270026] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.277038] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.282316] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.295245] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.296934] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.298435] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.302381] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.040983] Bluetooth: hci0: command tx timeout [ 152.168799] Bluetooth: hci1: command tx timeout [ 152.296860] Bluetooth: hci4: command tx timeout [ 152.360811] Bluetooth: hci5: command tx timeout [ 152.361818] Bluetooth: hci7: command tx timeout [ 152.362041] Bluetooth: hci3: command tx timeout [ 152.362505] Bluetooth: hci6: command tx timeout [ 152.425881] Bluetooth: hci2: command tx timeout [ 154.088772] Bluetooth: hci0: command tx timeout [ 154.216840] Bluetooth: hci1: command tx timeout [ 154.347770] Bluetooth: hci4: command tx timeout [ 154.408861] Bluetooth: hci3: command tx timeout [ 154.409877] Bluetooth: hci7: command tx timeout [ 154.410346] Bluetooth: hci6: command tx timeout [ 154.411827] Bluetooth: hci5: command tx timeout [ 154.472910] Bluetooth: hci2: command tx timeout [ 156.137897] Bluetooth: hci0: command tx timeout [ 156.265798] Bluetooth: hci1: command tx timeout [ 156.394016] Bluetooth: hci4: command tx timeout [ 156.456810] Bluetooth: hci6: command tx timeout [ 156.457298] Bluetooth: hci5: command tx timeout [ 156.458535] Bluetooth: hci7: command tx timeout [ 156.458785] Bluetooth: hci3: command tx timeout [ 156.521946] Bluetooth: hci2: command tx timeout [ 158.184779] Bluetooth: hci0: command tx timeout [ 158.313825] Bluetooth: hci1: command tx timeout [ 158.441757] Bluetooth: hci4: command tx timeout [ 158.506755] Bluetooth: hci3: command tx timeout [ 158.506805] Bluetooth: hci6: command tx timeout [ 158.507252] Bluetooth: hci7: command tx timeout [ 158.508065] Bluetooth: hci5: command tx timeout [ 158.569809] Bluetooth: hci2: command tx timeout [ 212.215620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.219580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.221591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.232053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.236850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.243963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.400352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.404082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.406966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.415007] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.421062] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.423376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.468904] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.479759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.487178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.497494] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.501914] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.506153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.530828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.540150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.558112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.563393] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.572907] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.575129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.596651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.602925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.609234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.619226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.629499] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.634930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.647860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.655072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.657208] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.659584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.659605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.661586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.666305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.669357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.671869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.674264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.676341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.677511] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.681610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.701321] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.703407] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.715950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.802904] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.820924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.312768] Bluetooth: hci0: command tx timeout [ 214.506814] Bluetooth: hci1: command tx timeout [ 214.569773] Bluetooth: hci2: command tx timeout [ 214.634799] Bluetooth: hci3: command tx timeout [ 214.696776] Bluetooth: hci5: command tx timeout [ 214.761245] Bluetooth: hci7: command tx timeout [ 214.762462] Bluetooth: hci4: command tx timeout [ 214.888982] Bluetooth: hci6: command tx timeout [ 216.361700] Bluetooth: hci0: command tx timeout [ 216.553548] Bluetooth: hci1: command tx timeout [ 216.616789] Bluetooth: hci2: command tx timeout [ 216.680744] Bluetooth: hci3: command tx timeout [ 216.744969] Bluetooth: hci5: command tx timeout [ 216.808898] Bluetooth: hci4: command tx timeout [ 216.809406] Bluetooth: hci7: command tx timeout [ 216.937035] Bluetooth: hci6: command tx timeout [ 218.408752] Bluetooth: hci0: command tx timeout [ 218.600921] Bluetooth: hci1: command tx timeout [ 218.664831] Bluetooth: hci2: command tx timeout [ 218.728940] Bluetooth: hci3: command tx timeout [ 218.792826] Bluetooth: hci5: command tx timeout [ 218.856809] Bluetooth: hci7: command tx timeout [ 218.857347] Bluetooth: hci4: command tx timeout [ 218.986713] Bluetooth: hci6: command tx timeout [ 220.456769] Bluetooth: hci0: command tx timeout [ 220.648774] Bluetooth: hci1: command tx timeout [ 220.713398] Bluetooth: hci2: command tx timeout [ 220.776747] Bluetooth: hci3: command tx timeout [ 220.840871] Bluetooth: hci5: command tx timeout [ 220.904832] Bluetooth: hci4: command tx timeout [ 220.905375] Bluetooth: hci7: command tx timeout [ 221.033865] Bluetooth: hci6: command tx timeout [ 274.550578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.552074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.553080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.555389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.556868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.558142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.609523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.611942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.620158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.638781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.641375] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.644141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.734122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.736302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.737483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.743699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.745987] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.747692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.819357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.822981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.834922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.859451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.861155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.864977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.903292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.904930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.905999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.908604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.911949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.913166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.915535] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.918873] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.920238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.923913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.930619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.933152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.934778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.939375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.940970] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.942389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.946944] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.949501] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.028913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.047979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.073434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.096396] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.112818] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.117862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.585836] Bluetooth: hci0: command tx timeout [ 276.713894] Bluetooth: hci1: command tx timeout [ 276.777789] Bluetooth: hci2: command tx timeout [ 276.905082] Bluetooth: hci3: command tx timeout [ 277.033731] Bluetooth: hci6: command tx timeout [ 277.096911] Bluetooth: hci4: command tx timeout [ 277.289744] Bluetooth: hci5: command tx timeout [ 277.352826] Bluetooth: hci7: command tx timeout [ 278.632776] Bluetooth: hci0: command tx timeout [ 278.761742] Bluetooth: hci1: command tx timeout [ 278.824829] Bluetooth: hci2: command tx timeout [ 278.953785] Bluetooth: hci3: command tx timeout [ 279.081846] Bluetooth: hci6: command tx timeout [ 279.145847] Bluetooth: hci4: command tx timeout [ 279.337770] Bluetooth: hci5: command tx timeout [ 279.400828] Bluetooth: hci7: command tx timeout [ 280.681737] Bluetooth: hci0: command tx timeout [ 280.809733] Bluetooth: hci1: command tx timeout [ 280.873747] Bluetooth: hci2: command tx timeout [ 281.001876] Bluetooth: hci3: command tx timeout [ 281.129739] Bluetooth: hci6: command tx timeout [ 281.192755] Bluetooth: hci4: command tx timeout [ 281.384729] Bluetooth: hci5: command tx timeout [ 281.448831] Bluetooth: hci7: command tx timeout [ 282.729723] Bluetooth: hci0: command tx timeout [ 282.856801] Bluetooth: hci1: command tx timeout [ 282.920933] Bluetooth: hci2: command tx timeout [ 283.049707] Bluetooth: hci3: command tx timeout [ 283.177776] Bluetooth: hci6: command tx timeout [ 283.240945] Bluetooth: hci4: command tx timeout [ 283.433902] Bluetooth: hci5: command tx timeout [ 283.498866] Bluetooth: hci7: command tx timeout [ 337.082911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.090404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.092351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.093674] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.101006] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.102154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.104485] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.105582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.106596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.125558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.130775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.132090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.289919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.297900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.301311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.314341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.316405] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.318153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.364078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.371865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.378722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.407756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.410869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.413188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.436934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.448501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.453833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.460734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.462956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.482175] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.485033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.498856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.501839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.504332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.507998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.512791] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.524839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.526934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.538060] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.540180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.561932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.588187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.592023] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.594862] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.600111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.606338] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.664006] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.666910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.176784] Bluetooth: hci1: command tx timeout [ 339.177702] Bluetooth: hci0: command tx timeout [ 339.369406] Bluetooth: hci2: command tx timeout [ 339.499814] Bluetooth: hci3: command tx timeout [ 339.560941] Bluetooth: hci4: command tx timeout [ 339.688745] Bluetooth: hci6: command tx timeout [ 339.754183] Bluetooth: hci5: command tx timeout [ 339.754973] Bluetooth: hci7: command tx timeout [ 341.224748] Bluetooth: hci1: command tx timeout [ 341.226156] Bluetooth: hci0: command tx timeout [ 341.418681] Bluetooth: hci2: command tx timeout [ 341.544746] Bluetooth: hci3: command tx timeout [ 341.609445] Bluetooth: hci4: command tx timeout [ 341.736936] Bluetooth: hci6: command tx timeout [ 341.801690] Bluetooth: hci7: command tx timeout [ 341.802175] Bluetooth: hci5: command tx timeout [ 343.272800] Bluetooth: hci0: command tx timeout [ 343.273330] Bluetooth: hci1: command tx timeout [ 343.464721] Bluetooth: hci2: command tx timeout [ 343.594673] Bluetooth: hci3: command tx timeout [ 343.656788] Bluetooth: hci4: command tx timeout [ 343.784724] Bluetooth: hci6: command tx timeout [ 343.848767] Bluetooth: hci7: command tx timeout [ 343.850145] Bluetooth: hci5: command tx timeout [ 345.340026] Bluetooth: hci0: command tx timeout [ 345.340535] Bluetooth: hci1: command tx timeout [ 345.512754] Bluetooth: hci2: command tx timeout [ 345.640746] Bluetooth: hci3: command tx timeout [ 345.704836] Bluetooth: hci4: command tx timeout [ 345.833759] Bluetooth: hci6: command tx timeout [ 345.896871] Bluetooth: hci5: command tx timeout [ 345.897360] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:43:15 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000002 RCX=ffffffff867c2db0 RDX=1ffff1100d9c135a RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88806ce09ae0 RSP=ffff88806ce09a18 R8 =ffffffff867c2db4 R9 =ffff88806ce09ac8 R10=000000000003c001 R11=00000000000111a0 R12=ffff88806ce09ae8 R13=ffff88806ce09ad0 R14=0000000000000005 R15=ffff88806ce09a88 RIP=ffffffff8114941a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555575b43400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efe727e3090 CR3=000000002f6b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000000000ff00000000 XMM02=000000000000000000000000ff000000 XMM03=0000000000ff00000000000000ff0000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88803622fc58 RCX=ffffffff8480949a RDX=ffff888015190000 RSI=00000000000000ce RDI=00000000000000cd RBP=dffffc0000000000 RSP=ffff88803622fa68 R8 =0000000000000001 R9 =fffff94000367dbe R10=000000000000000d R11=0000000000000001 R12=ffff88800bb25340 R13=00000000000000ce R14=00000000000000cd R15=ffffed1006c45f8d RIP=ffffffff81517ec8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1fb7f19540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1fb800d0f0 CR3=000000002dcf0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000