Warning: Permanently added '[localhost]:25501' (ECDSA) to the list of known hosts. 2025/06/15 13:40:06 fuzzer started 2025/06/15 13:40:06 dialing manager at localhost:42061 syzkaller login: [ 102.342747] cgroup: Unknown subsys name 'net' [ 102.481663] cgroup: Unknown subsys name 'cpuset' [ 102.526945] cgroup: Unknown subsys name 'rlimit' 2025/06/15 13:40:32 syscalls: 205 2025/06/15 13:40:32 code coverage: enabled 2025/06/15 13:40:32 comparison tracing: enabled 2025/06/15 13:40:32 extra coverage: enabled 2025/06/15 13:40:32 setuid sandbox: enabled 2025/06/15 13:40:32 namespace sandbox: enabled 2025/06/15 13:40:32 Android sandbox: enabled 2025/06/15 13:40:32 fault injection: enabled 2025/06/15 13:40:32 leak checking: enabled 2025/06/15 13:40:32 net packet injection: enabled 2025/06/15 13:40:32 net device setup: enabled 2025/06/15 13:40:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/15 13:40:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/15 13:40:32 USB emulation: enabled 2025/06/15 13:40:32 hci packet injection: enabled 2025/06/15 13:40:32 wifi device emulation: enabled 2025/06/15 13:40:32 802.15.4 emulation: enabled 2025/06/15 13:40:32 fetching corpus: 0, signal 0/0 (executing program) 2025/06/15 13:40:34 starting 8 fuzzer processes 13:40:34 executing program 0: r0 = msgget$private(0x0, 0x40) msgrcv(r0, &(0x7f0000000000)={0x0, ""/127}, 0x87, 0x0, 0x2000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x133}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x246}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8a}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x40000d0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x2, 0x8, 0x45, @remote, @private0, 0x7, 0x10, 0x1, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x270, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40000004}, 0x4000801) msgrcv(r0, &(0x7f0000000680)={0x0, ""/170}, 0xb2, 0x3, 0x3000) r3 = msgget(0x0, 0x209) msgsnd(r3, &(0x7f0000000740)={0x3, "ca44da26279cab5010b1fc26fcb3056b07612bb0"}, 0x1c, 0x0) r4 = getegid() msgctl$IPC_SET(r3, 0x1, &(0x7f0000000780)={{0x1, 0xee01, 0xee00, 0xee00, r4, 0x0, 0x9}, 0x0, 0x0, 0x4, 0x40000000000, 0x80000000, 0x0, 0x9, 0x9, 0x100, 0x3f, 0xffffffffffffffff}) msgrcv(r0, &(0x7f0000000800)={0x0, ""/77}, 0x55, 0x0, 0x2000) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000880)=""/115) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r5, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000d0}, 0x800) msgctl$IPC_RMID(r3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) msgget(0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x108, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x840) 13:40:34 executing program 1: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008841}, 0x4810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x41000}, 0x400c000) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x2, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)='ip_vti0\x00', 0x3, 0x4, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x40005) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r1) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xa0}}, 0x20044080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x0, 0x313, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000015) [ 130.011471] audit: type=1400 audit(1749994834.691:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:40:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x844) socketpair(0x1d, 0x3, 0x3e, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r2, 0x299b, 0x80000}) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r6, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r6, 0x180, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x37}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048850}, 0x8050) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c844}, 0x1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000a80)={'tunl0\x00', 0x0, 0x20, 0x80, 0x80000001, 0x3, {{0x10, 0x4, 0x3, 0x1c, 0x40, 0x65, 0x0, 0x5, 0x4, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x3, 0x9f}, @timestamp={0x44, 0x1c, 0xe6, 0x0, 0x9, [0x5, 0x9, 0x20000000, 0x7, 0x80000000, 0x80000000]}, @generic={0x82, 0x6, "984ec850"}, @generic={0x7, 0x2}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) msgget$private(0x0, 0x100) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x8885}, 0x20000000) 13:40:34 executing program 3: socketpair(0x26, 0x4, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800042}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000890}, 0x4000) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000380)=0x10000, 0x4) socketpair(0xb, 0x800, 0xf73, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x3, 0x1, 0x1, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x80, 0x3f, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7, 0x8, 0x9, 0x9b64}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x22104080}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x104, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x74}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x1, 0x1, 0x0, {0xbc9d, 0x2, 0x0, 0x3c1, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x2, 0x3f}}, @NL80211_ATTR_KEYS={0xb8, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "6261bec042f69ffe"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x7, 0x4, "d33070"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bc1f871fe2a0561de7b7599c42"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "488f533f634976cc5b3b091639"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008065}, 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000008c0)={@private0, 0x5d, r7}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x885) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000a40)=@nfc_llcp={0x27, 0x1, 0x0, 0x5, 0x4, 0x48, "756d139277b4947dd597cda8aa8ff4cefd66409a75f7db73cef2c8ab2d110697b574699dc4644cb4d48ffbe4a40c641b40822c2a599b4ff2b451dc4faf3abc", 0x2d}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="638b64bec66bb752d927d9f7ca14e12cddba147ca1826122daa1652c24063b913085d29c8c6c8f977485cc3babd33a8fb0e4b83b1a854a6b929ca190581f24c6c786c97263cd668894c26ea7c8eda69c612a14bb25fa2eac7e476ad611deba9bf4a907fc50214f48e5c22f6f3d2e120e10ba4b99afea35515f5a6f0342b221b34ed72b701ab683518370", 0x8a}, {&(0x7f0000000b80)="33d14bebd0974c4d564dd8d0dfcb337f144bc7c84775e503523c43137347bcfa5c009b3de9fcf122854b508338a091350e4b486417945a8c26934361628b3634ab", 0x41}, {&(0x7f0000000c00)="25e0f9c3cdf116fdbba652b917821ceb915b7d6311af72b3feffcd0bbfcb270b0befbe15d41c866073036efaf961", 0x2e}], 0x3}}], 0x1, 0x840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r9 = socket$inet6(0xa, 0xa, 0x8) getsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10) 13:40:34 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/vlan/vlan0\x00') r2 = io_uring_setup(0x18f7, &(0x7f0000000040)={0x0, 0x1435, 0x0, 0x2, 0x6c, 0x0, r1}) syz_io_uring_setup(0x460d, &(0x7f00000000c0)={0x0, 0xb94d, 0x1, 0x1, 0xae, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000001c0)) syz_io_uring_setup(0x5863, &(0x7f00000002c0)={0x0, 0x440a, 0x4, 0x1, 0x150, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) write$eventfd(r1, &(0x7f00000003c0)=0x4, 0x8) r4 = syz_open_procfs(r0, &(0x7f0000000400)='timers\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40a88a1}, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x7f, 0x2, 0x3, 0x7d58, 0x0, @empty, @remote, 0x10, 0x20, 0x0, 0x2}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r6) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r2, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) 13:40:34 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2d0, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x110, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dbb7bdd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10060b2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d114143}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ab78c19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e9d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c2d5c6a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x744425da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a705ba1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x435f2ede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bd9019f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5834a05c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32878a64}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28bd}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbecd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5320}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88a2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50fe4259}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ba787c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaacb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x649b32df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cf9d64f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x842c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f0bcfe3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x301f2b4c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c88ca9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47907fc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37702e52}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b6a9175}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72e8ac93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x398657b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f397eb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x687e39f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24737979}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a9ea669}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f2fd83b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13e1b3d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53939cfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r1 = socket$packet(0x11, 0x7, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1}, @llc={0x1a, 0x320, 0x6, 0xc1, 0x2, 0x10, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @l2tp={0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x58, &(0x7f0000000400)='veth0\x00', 0x20, 0x0, 0x101}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x53d}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xec}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x64}}, 0x20040080) socketpair(0x27, 0x4, 0x2, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x40, 0x6000000, 0x80, @private1, @mcast2, 0x10, 0x700, 0x6, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'tunl0\x00', r4, 0x8020, 0x80, 0x4, 0x2, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x24, 0x8d, 0x3, 0x1, [{@remote, 0x4}, {@remote, 0x3}, {@loopback, 0x3ff}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xff, 0x1, 0x8, [{@loopback, 0x1000}]}, @timestamp={0x44, 0x24, 0xe7, 0x0, 0x9, [0x0, 0x8, 0x1000, 0x1f, 0x9, 0x8, 0x4, 0x7]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x800) r6 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, 0xffffffffffffffff, 0x8000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x4008081) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x114, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3922b4a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x163ba2e7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41d494ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x685130e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c925ceb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eca79fb}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x571f61e5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b970c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76c3348f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541b6065}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ab3106}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d115e56}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x114}}, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000c80)="be439c17fee7fe5c3b6cbf129850f9d98710c9a48e14077d478a1287aea94eec76c4857dd32fe192cd91d22c2c45a21a0c29c34669f8ec0ee2e98eb99dbac156b0ab237f41a2f5829273815f62c599389723615a8b8ec3a4cdce3922bf14744a4039fdcb295dbc26814383fa1f4642a644b0798154f63157fe8607a26562c868e3b5f1ce2f2e34c16ed5da0dbfa1cdb32225fa058d3c87ade86ad760eff4692a8070fb56e71a53702b61d516319eca896348985d09fb5c7fa01e9f", 0xbb, 0x2c000, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000d40), 0x0, 0x2, &(0x7f0000000d80)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', r5, 0x6, 0x7f, 0x2, 0x2, 0x5a, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x20, 0x6, 0x3ff}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000e80)={@mcast2, 0x2c, r5}) 13:40:34 executing program 6: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4008890) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='personality\x00') sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r2, 0x1408, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x900, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x39}}}}, ["", "", "", ""]}, 0x20}}, 0x20000010) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, 0x0, 0x1a24, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x902200, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}, {@loose}, {@loose}, {@cachetag={'cachetag', 0x3d, 'batadv\x00'}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@seclabel}]}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048004}, 0xc0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x24004081) r5 = openat$cgroup_procs(r0, &(0x7f0000000b00)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x517a3da2759981d4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfd4f, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x20000014) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40050}, 0x20040054) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4000001) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000001680)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x118, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x800) 13:40:34 executing program 7: syz_extract_tcp_res(&(0x7f0000000000), 0x29a2939, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000080)={0x3, "7521ccdc57c174f2a51519e4d24d40f4c0bfeb96c32de2a85922320a9c36e8e940b94211f29bcfc1b497933818c7395939426cac93260f90b39983759661cb99f14ae744e1bc0f9002e8b917f14c92f1a29bb392b3b534181438e6e1925c1441967863979604076e6f20a9c79ef10a2abcee"}, 0x7a, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000100)=""/228) msgsnd(0xffffffffffffffff, &(0x7f0000000200)={0x0, "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"}, 0x1008, 0x0) syz_extract_tcp_res(&(0x7f0000001240), 0x0, 0x831000) r0 = msgget$private(0x0, 0x40) msgsnd(r0, &(0x7f0000001280)={0x2, "d5be7a698ab1cd0a286421f7"}, 0x14, 0x800) mq_timedsend(0xffffffffffffffff, &(0x7f00000012c0)="fd774802a4ac039cd47dca28f87cb3d0b44a449031ec2335df93abed384e70a0b2b7ee398cea9d963a97bb0c697be9f5cf8705f99947760bdf4ce99cceced1f139281e7aa29a9627c923009fead70102c05c209b3f382c92c36e31c585de4fd38c30eddb2783a550411d4598403aefb8f2ef1d47407d0fdddc6fb921defd00150a3657e7dc5aa6a0bb7d47c39266421735becccdf67be930b75bbd7636d6930df574dc034b635915b29b4c84cd4c75a55d890381b2cef481b6d619d06ed3adf59511fb676183274b477b5e9d50b721cc56692047ce198d52403d9da2bb52dd57eb3b68daeecddaeec8d89f350850ba0eebc6", 0xf2, 0x8000, &(0x7f00000013c0)={0x0, 0x3938700}) syz_extract_tcp_res(&(0x7f0000001400), 0x40, 0x1) r1 = msgget(0x0, 0x80) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000001440)=""/109) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x100, 0x0) write$tun(r2, &(0x7f0000001500)={@void, @void, @ipv4=@tipc={{0x2c, 0x4, 0x1, 0x6, 0xcd, 0x65, 0x0, 0x80, 0x6, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x14, 0xc7, 0x0, 0x3, [0xfffffffb, 0x7, 0x1, 0xb42e]}, @rr={0x7, 0x17, 0x50, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @private=0xa010102, @broadcast]}, @end, @timestamp_prespec={0x44, 0x44, 0x6a, 0x3, 0x7, [{@broadcast, 0x7}, {@broadcast, 0x4}, {@remote, 0x3}, {@multicast2, 0x2f2d}, {@remote, 0x4}, {@empty, 0x8}, {@empty, 0xff}, {@empty, 0x7}]}, @noop, @cipso={0x86, 0x15, 0x1, [{0x6, 0xf, "441f74e1e9f81b7f2daebc2d06"}]}, @generic={0x94, 0xb, "d6ab4f98d13bca02d8"}, @timestamp={0x44, 0x8, 0x3f, 0x0, 0x8, [0x1]}]}}, @payload_conn={{{0x1d, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3, 0x2, 0xf800, 0x0, 0x1, 0x4, 0x5, 0x0, 0x8, 0x7, 0x1, 0x4e22, 0x4e20}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0xcd) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000001600)=""/154) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f00000016c0)=""/124) r3 = getegid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000001740)={{0x1, 0xee01, r3, 0xee01, 0xffffffffffffffff, 0x2b, 0x3}, 0x0, 0x0, 0x4, 0x9, 0x1, 0x7, 0x5, 0x9, 0x7, 0xb1e6}) syz_genetlink_get_family_id$l2tp(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) [ 131.522847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.526077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.529225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.539125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.547190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.650221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.655015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.672956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.690287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.697755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.718380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.729644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.734671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.748753] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.750580] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.755309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.756775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.762992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.764817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.765683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.769666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.772137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.772800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.777143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.780774] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.782709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.786790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.788039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.789716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.792823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.795553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.799639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.809793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.809984] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.817009] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.828349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.844387] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.852274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.885150] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.890714] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 133.614772] Bluetooth: hci0: command tx timeout [ 133.806695] Bluetooth: hci1: command tx timeout [ 133.870783] Bluetooth: hci2: command tx timeout [ 133.870822] Bluetooth: hci5: command tx timeout [ 133.871333] Bluetooth: hci3: command tx timeout [ 133.934600] Bluetooth: hci4: command tx timeout [ 133.935133] Bluetooth: hci7: command tx timeout [ 133.935706] Bluetooth: hci6: command tx timeout [ 135.663478] Bluetooth: hci0: command tx timeout [ 135.855506] Bluetooth: hci1: command tx timeout [ 135.918506] Bluetooth: hci3: command tx timeout [ 135.918950] Bluetooth: hci5: command tx timeout [ 135.919359] Bluetooth: hci2: command tx timeout [ 135.983785] Bluetooth: hci6: command tx timeout [ 135.984226] Bluetooth: hci7: command tx timeout [ 135.984357] Bluetooth: hci4: command tx timeout [ 137.710761] Bluetooth: hci0: command tx timeout [ 137.905461] Bluetooth: hci1: command tx timeout [ 137.967678] Bluetooth: hci2: command tx timeout [ 137.967830] Bluetooth: hci5: command tx timeout [ 137.968116] Bluetooth: hci3: command tx timeout [ 138.030501] Bluetooth: hci6: command tx timeout [ 138.030849] Bluetooth: hci4: command tx timeout [ 138.030921] Bluetooth: hci7: command tx timeout [ 139.759478] Bluetooth: hci0: command tx timeout [ 139.950587] Bluetooth: hci1: command tx timeout [ 140.014515] Bluetooth: hci5: command tx timeout [ 140.014948] Bluetooth: hci3: command tx timeout [ 140.015348] Bluetooth: hci2: command tx timeout [ 140.078754] Bluetooth: hci4: command tx timeout [ 140.079184] Bluetooth: hci7: command tx timeout [ 140.079800] Bluetooth: hci6: command tx timeout [ 191.354021] syz-executor.2 (291) used greatest stack depth: 24832 bytes left [ 194.070275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.080005] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.088857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.102632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.107789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.198376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.204390] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.208771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.219318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.232496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.236005] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.241937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.261925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.265332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.270386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.270850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.274872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.278946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.300679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.334369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.348515] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.359979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.387919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.414371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.433945] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.439333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.453675] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.460330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.465014] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.478762] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.484984] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.493564] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.503113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.505118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.540591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.550225] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.585681] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.624756] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.627535] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.716942] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.143598] Bluetooth: hci0: command tx timeout [ 196.334984] Bluetooth: hci2: command tx timeout [ 196.398609] Bluetooth: hci3: command tx timeout [ 196.527571] Bluetooth: hci4: command tx timeout [ 196.592522] Bluetooth: hci6: command tx timeout [ 196.846648] Bluetooth: hci7: command tx timeout [ 196.846691] Bluetooth: hci1: command tx timeout [ 196.911352] Bluetooth: hci5: command tx timeout [ 198.190597] Bluetooth: hci0: command tx timeout [ 198.383489] Bluetooth: hci2: command tx timeout [ 198.446583] Bluetooth: hci3: command tx timeout [ 198.576715] Bluetooth: hci4: command tx timeout [ 198.638487] Bluetooth: hci6: command tx timeout [ 198.894747] Bluetooth: hci1: command tx timeout [ 198.896111] Bluetooth: hci7: command tx timeout [ 198.958480] Bluetooth: hci5: command tx timeout [ 200.238494] Bluetooth: hci0: command tx timeout [ 200.430528] Bluetooth: hci2: command tx timeout [ 200.494730] Bluetooth: hci3: command tx timeout [ 200.622941] Bluetooth: hci4: command tx timeout [ 200.686599] Bluetooth: hci6: command tx timeout [ 200.942891] Bluetooth: hci7: command tx timeout [ 200.942921] Bluetooth: hci1: command tx timeout [ 201.007464] Bluetooth: hci5: command tx timeout [ 202.287494] Bluetooth: hci0: command tx timeout [ 202.478844] Bluetooth: hci2: command tx timeout [ 202.542755] Bluetooth: hci3: command tx timeout [ 202.670795] Bluetooth: hci4: command tx timeout [ 202.734493] Bluetooth: hci6: command tx timeout [ 202.990558] Bluetooth: hci1: command tx timeout [ 202.991099] Bluetooth: hci7: command tx timeout [ 203.054626] Bluetooth: hci5: command tx timeout [ 256.200022] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.208868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.211940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.218227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.227298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.321961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.326486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.335273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.345140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.351825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.475764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.491033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.493085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.498918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.502468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.594046] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.600122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.602498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.603848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.607671] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.617318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.622210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.624862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.627235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.630019] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.637640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.643292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.647395] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.651375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.656944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.659958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.663999] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.671340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.677114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.679282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.685857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.691307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.700956] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.710165] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.742134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.286528] Bluetooth: hci0: command tx timeout [ 258.415623] Bluetooth: hci1: command tx timeout [ 258.542491] Bluetooth: hci2: command tx timeout [ 258.798607] Bluetooth: hci6: command tx timeout [ 258.798666] Bluetooth: hci3: command tx timeout [ 258.799388] Bluetooth: hci4: command tx timeout [ 258.926539] Bluetooth: hci5: command tx timeout [ 259.055261] Bluetooth: hci7: command tx timeout [ 260.334701] Bluetooth: hci0: command tx timeout [ 260.462498] Bluetooth: hci1: command tx timeout [ 260.590533] Bluetooth: hci2: command tx timeout [ 260.846563] Bluetooth: hci4: command tx timeout [ 260.846678] Bluetooth: hci3: command tx timeout [ 260.847027] Bluetooth: hci6: command tx timeout [ 260.977517] Bluetooth: hci5: command tx timeout [ 261.103525] Bluetooth: hci7: command tx timeout [ 262.382556] Bluetooth: hci0: command tx timeout [ 262.512446] Bluetooth: hci1: command tx timeout [ 262.638650] Bluetooth: hci2: command tx timeout [ 262.895912] Bluetooth: hci3: command tx timeout [ 262.895943] Bluetooth: hci4: command tx timeout [ 262.896378] Bluetooth: hci6: command tx timeout [ 263.022464] Bluetooth: hci5: command tx timeout [ 263.150471] Bluetooth: hci7: command tx timeout [ 264.432649] Bluetooth: hci0: command tx timeout [ 264.558884] Bluetooth: hci1: command tx timeout [ 264.686474] Bluetooth: hci2: command tx timeout [ 264.942561] Bluetooth: hci4: command tx timeout [ 264.942699] Bluetooth: hci3: command tx timeout [ 264.943488] Bluetooth: hci6: command tx timeout [ 265.070620] Bluetooth: hci5: command tx timeout [ 265.199526] Bluetooth: hci7: command tx timeout [ 318.596286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.600078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.603356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.616002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.620391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.691679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.699969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.705223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.731960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.735309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.787491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.798692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.811637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.828974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.840956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.990771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.999596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.004387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.010658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.012946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.017980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.040978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.099614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.114155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.120358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.198321] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.220091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.254912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.271256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.338778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.714103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.741803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.751699] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.764269] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.775036] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.779086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.783546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.868101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.924365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.010998] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.686572] Bluetooth: hci0: command tx timeout [ 320.814530] Bluetooth: hci1: command tx timeout [ 320.942724] Bluetooth: hci2: command tx timeout [ 321.070604] Bluetooth: hci4: command tx timeout [ 321.262694] Bluetooth: hci3: command tx timeout [ 321.454587] Bluetooth: hci5: command tx timeout [ 321.904645] Bluetooth: hci7: command tx timeout [ 322.222749] Bluetooth: hci6: command tx timeout [ 322.736792] Bluetooth: hci0: command tx timeout [ 322.862504] Bluetooth: hci1: command tx timeout [ 322.990652] Bluetooth: hci2: command tx timeout [ 323.118620] Bluetooth: hci4: command tx timeout [ 323.310590] Bluetooth: hci3: command tx timeout [ 323.503713] Bluetooth: hci5: command tx timeout [ 323.950674] Bluetooth: hci7: command tx timeout [ 324.271045] Bluetooth: hci6: command tx timeout [ 324.782506] Bluetooth: hci0: command tx timeout [ 324.910515] Bluetooth: hci1: command tx timeout [ 325.038856] Bluetooth: hci2: command tx timeout [ 325.166727] Bluetooth: hci4: command tx timeout [ 325.358501] Bluetooth: hci3: command tx timeout [ 325.550483] Bluetooth: hci5: command tx timeout [ 325.998486] Bluetooth: hci7: command tx timeout [ 326.318484] Bluetooth: hci6: command tx timeout [ 326.830529] Bluetooth: hci0: command tx timeout [ 326.958479] Bluetooth: hci1: command tx timeout [ 327.086494] Bluetooth: hci2: command tx timeout [ 327.215710] Bluetooth: hci4: command tx timeout [ 327.406521] Bluetooth: hci3: command tx timeout [ 327.598758] Bluetooth: hci5: command tx timeout [ 328.046725] Bluetooth: hci7: command tx timeout [ 328.366486] Bluetooth: hci6: command tx timeout [ 381.060350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.068683] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.073272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.084262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.092794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.259902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.263556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.278178] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.286464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.288855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.293296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.299386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.307260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.309373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.316139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.394041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.398240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.410332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.415242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.433004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.434852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.440068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.449575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.456202] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.460691] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.471173] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.502213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.508927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.545840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.553078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.557871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.574630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.588162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.603003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.608893] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.763134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.774015] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.779195] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.848118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.881200] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.151501] Bluetooth: hci0: command tx timeout [ 383.408773] Bluetooth: hci2: command tx timeout [ 383.409989] Bluetooth: hci1: command tx timeout [ 383.535564] Bluetooth: hci5: command tx timeout [ 383.663576] Bluetooth: hci4: command tx timeout [ 383.663609] Bluetooth: hci3: command tx timeout [ 383.790571] Bluetooth: hci6: command tx timeout [ 384.046619] Bluetooth: hci7: command tx timeout [ 385.198685] Bluetooth: hci0: command tx timeout [ 385.454526] Bluetooth: hci1: command tx timeout [ 385.455537] Bluetooth: hci2: command tx timeout [ 385.583710] Bluetooth: hci5: command tx timeout [ 385.710917] Bluetooth: hci3: command tx timeout [ 385.711935] Bluetooth: hci4: command tx timeout [ 385.838537] Bluetooth: hci6: command tx timeout [ 386.094691] Bluetooth: hci7: command tx timeout [ 387.246533] Bluetooth: hci0: command tx timeout [ 387.502737] Bluetooth: hci2: command tx timeout [ 387.502757] Bluetooth: hci1: command tx timeout [ 387.630715] Bluetooth: hci5: command tx timeout [ 387.758489] Bluetooth: hci3: command tx timeout [ 387.758677] Bluetooth: hci4: command tx timeout [ 387.886849] Bluetooth: hci6: command tx timeout [ 388.143632] Bluetooth: hci7: command tx timeout [ 389.294644] Bluetooth: hci0: command tx timeout [ 389.550620] Bluetooth: hci1: command tx timeout [ 389.550644] Bluetooth: hci2: command tx timeout [ 389.678730] Bluetooth: hci5: command tx timeout [ 389.806870] Bluetooth: hci3: command tx timeout [ 389.806905] Bluetooth: hci4: command tx timeout [ 389.934551] Bluetooth: hci6: command tx timeout [ 390.193026] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:45:35 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88806ce08a78 RCX=ffff88806ce089cc RDX=1ffff1100d9c115a RSI=ffffffff85c1cc40 RDI=ffffffff81a7dfd1 RBP=ffff88806ce08ad0 RSP=ffff88806ce08a60 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b4ed R11=00000000000249c3 R12=ffff88806ce08b40 R13=0000000000000000 R14=ffff888034649b80 R15=ffff88801660fe00 RIP=ffffffff81353a2b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4dad47f5d0 CR3=000000003240d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88803616fa30 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81354012 RDI=ffffffff85c1cc40 RBP=ffffffff85c1cc40 RSP=ffff88806cf08998 R8 =0000000000000001 R9 =ffff88806cf08a90 R10=000000000003b4ed R11=00000000000c2e7d R12=ffffffff81354012 R13=ffff88806cf08a98 R14=ffff88803616fa08 R15=ffff88806cf08a50 RIP=ffffffff8151abdc RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0cb0d62540 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0cb0f4d620 CR3=0000000035703000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000