last executing test programs: 4.658552071s ago: executing program 1 (id=222): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x39, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], &(0x7f0000000440)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x50, '\x00', r1}, 0x90) socket(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000003040)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400001"], 0xb0}}, 0x0) 3.9263185s ago: executing program 3 (id=225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {0x5}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="25003300d00000000802110000010802110000005050505050500000"], 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000001265161424eba6c895f60d00560d5b0af9b8800a9c523d6572b1fbf1f375ea488e599e9230effd97f820d36911432d4226e7ce907b425320311a7fffc51f40000000008258ed28072d462eadc8572ad0f13a5e7800"/102, @ANYRES16=r3, @ANYBLOB="00022abd7000fcdbdf250c0000000c00990005000000010000000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x8805) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x68, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x5014, @val, @val, @val={0x3, 0x1, 0xa}, @val={0x4, 0x6}, @void, @val={0x5, 0x3, {0x4, 0xae}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0xa1, 0x4}}, @void, @void, @void, @void}}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xd4, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x74}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x58, 0x1, "5db058d3ab6cb45bafefa9f925de88acb891fd5a6aa84bcb90d683e278af538d94c31525b8e84c97be0f51a74d35e0df093f256d1f7aa6ea05fbf66808ad50df1a6228d4e035f61e8e5cea301f84879062f4b3b8"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fff}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe60a}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x40}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) 3.81157325s ago: executing program 3 (id=226): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e4e2256"], 0x7) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) r0 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x37}, @l2cap_cid_signaling={{0x33}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x49, 0x2}, {0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x79, 0x2}, {0x9}}, @l2cap_move_chan_req={{0xe, 0xc, 0x3}, {0x7, 0xd}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0xcc43, 0xf549, 0x100, 0x5}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x7fff, 0x0, 0x2, 0x4f4}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x101}}]}}, 0x3c) syz_emit_vhci(0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000029c0)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xc4, r1, 0x400, 0x70bd25, 0xa5dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "df23f700a8b50bf4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4902c9c0d5931e691507c899faf41370298d00"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="948b3e98c888c88a33cacdb0770000a6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "661f83ecad25a51e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ff889af5cf1ebe0d35a6817e13c3371fecdeb6d210a66b4bab53b8402d93f72"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f1dbfbce65c8d020c4157928ab3626c1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x20000400}]}]}, 0xc4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe4e}}, 0x4040001) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="df9410e2b3956e80bc3aa4847ecce9e0ca44d5845e69669c9864104576daa895910737a5b6ec2bc98d8a83251946890552f9aa43ad2ac23aa0407d5c1b8b3671a1d0c0df1be9f97aeaf604cd0c9fdbf97e87f2b82cb2c17810658a5b9d4733506070cc26127b234861d673a4adc99acadb72f1d17635164a3e96d9b83a887deb0df0887b2e6121f80fda17d2f54842f26f491f53e04de7649f54e8e220148fa5a659821e28ccc41a5610a4e3410d5a7d1ac8430d0d4c8884c2eb5cdef28ac6be16656b35b3e3cc95", 0xc8}, {&(0x7f0000000040)="4c3b4c3eb00ca4e04a96d3295871e209b97a13b37bc78e", 0x17}], 0x2}, 0x2000c001) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x1, 0x3, 0x3, 0x0, 0x3f}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x68, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) 3.288627236s ago: executing program 1 (id=229): r0 = socket$kcm(0x2, 0x200000000000004, 0x106) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a1", 0xc7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) syz_open_procfs$namespace(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r4}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000015ff4305b73c8b30f9a60f885068e297bc2b8364cb9a0b28800d3ad22fcf9f4abd808a1a7614414b597afc6a4b74b67514e3eca85b8cb2794b603c557eff52c14769cc18047a31d0f7d5a867e96f5fd21482334e0bf668da248e82059d0d24db007b7225bee814398f319797dcf946fde8e2f"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.908965838s ago: executing program 3 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) 2.305894447s ago: executing program 1 (id=233): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) bind$netlink(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r6) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000002100)={0x1c, r7, 0x926fdb2c68a18847, 0x0, 0x0, {0x11}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 2.010132309s ago: executing program 3 (id=237): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x1f}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x2, 'u,'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.931053738s ago: executing program 2 (id=238): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e4e22560c"], 0x7) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x37}, @l2cap_cid_signaling={{0x33}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x49, 0x2}, {0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x79, 0x2}, {0x9}}, @l2cap_move_chan_req={{0xe, 0xc, 0x3}, {0x7, 0xd}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0xcc43, 0xf549, 0x100, 0x5}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x7fff, 0x0, 0x2, 0x4f4}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x101}}]}}, 0x3c) syz_emit_vhci(0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000029c0)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xc4, r1, 0x400, 0x70bd25, 0xa5dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "df23f700a8b50bf4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4902c9c0d5931e691507c899faf41370298d00"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="948b3e98c888c88a33cacdb0770000a6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "661f83ecad25a51e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ff889af5cf1ebe0d35a6817e13c3371fecdeb6d210a66b4bab53b8402d93f72"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f1dbfbce65c8d020c4157928ab3626c1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x20000400}]}]}, 0xc4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe4e}}, 0x4040001) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="df9410e2b3956e80bc3aa4847ecce9e0ca44d5845e69669c9864104576daa895910737a5b6ec2bc98d8a83251946890552f9aa43ad2ac23aa0407d5c1b8b3671a1d0c0df1be9f97aeaf604cd0c9fdbf97e87f2b82cb2c17810658a5b9d4733506070cc26127b234861d673a4adc99acadb72f1d17635164a3e96d9b83a887deb0df0887b2e6121f80fda17d2f54842f26f491f53e04de7649f54e8e220148fa5a659821e28ccc41a5610a4e3410d5a7d1ac8430d0d4c8884c2eb5cdef28ac6be16656b35b3e3cc95", 0xc8}, {&(0x7f0000000040)="4c3b4c3eb00ca4e04a96d3295871e209b97a13b37bc78e", 0x17}], 0x2}, 0x2000c001) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x1, 0x3, 0x3, 0x0, 0x3f}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x68, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) 1.601470231s ago: executing program 0 (id=239): r0 = socket(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000000c0)=0x4, 0x4) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @sco={0x1f, @none}, @qipcrtr, @phonet={0x23, 0x3, 0x0, 0x5}, 0x7, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)='hsr0\x00', 0x8016, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x84044d0f, &(0x7f0000000240)) 1.35138922s ago: executing program 2 (id=240): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f000001acc0)=""/102396, 0x75059e56}], 0x1, 0x0, 0x7f) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x8c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) fspick(0xffffffffffffffff, 0x0, 0x0) 1.279487554s ago: executing program 1 (id=241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {0x5}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000001265161424eba6c895f60d00560d5b0af9b8800a9c523d6572b1fbf1f375ea488e599e9230effd97f820d36911432d4226e7ce907b425320311a7fffc51f40000000008258ed28072d462eadc8572ad0f13a5e7800"/102, @ANYRES16=r3, @ANYBLOB="00022abd7000fcdbdf250c0000000c00990005000000010000000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x8805) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x68, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x5014, @val, @val, @val={0x3, 0x1, 0xa}, @val={0x4, 0x6}, @void, @val={0x5, 0x3, {0x4, 0xae}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0xa1, 0x4}}, @void, @void, @void, @void}}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xd4, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x74}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x58, 0x1, "5db058d3ab6cb45bafefa9f925de88acb891fd5a6aa84bcb90d683e278af538d94c31525b8e84c97be0f51a74d35e0df093f256d1f7aa6ea05fbf66808ad50df1a6228d4e035f61e8e5cea301f84879062f4b3b8"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fff}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe60a}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x40}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) 1.190221555s ago: executing program 1 (id=242): syz_emit_vhci(&(0x7f0000000740)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xe2}, @l2cap_cid_signaling={{0xde}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x15, 0x4}, {0xc2, 0x9357}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x401, 0x1}}, @l2cap_info_req={{0xa, 0x77, 0x2}, {0x5}}, @l2cap_info_rsp={{0xb, 0x7, 0xa3}, {0xfff, 0x6, "f626e47877afbdbc83ab20d1b649d06ad99ad49961aa84e799b919988a42c2fe29500dc6e66305e3c21d066dc142fda2d656b8dfef304acb9d710709bf408fedac1245f288ead87461748bf5912075785733f45a0eb2e8e4ebf76b8d69bcdefca983e279686f5313160b88d23c4c7d101c41b768459276c361db9955163eaf7d9f04713e2d122ab8d8f3693640fd9484ba45f36071e59e5dbb51187ab02567"}}, @l2cap_conf_rsp={{0x5, 0x0, 0x15}, {0x80, 0x6, 0x7ff, [@l2cap_conf_mtu={0x1, 0x2, 0x1167}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x10, 0x5, 0xc000, 0x99}}]}}]}}, 0xe7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="62000000000000007b0a00ff000000001d0a000000000000950000000000000018100000c60381dc6c17fbb970c1aec762bc25e76efad02d3dc177ebac46e7f3cbb2f05fc45966b903378233a4e4873bfc51fbd9ecfa5e81b375b700ce5b1ed3e41578372c9c37fefb6c3b59797d944e1af368429d9c6fe9c3144f159d864cdb42d2e39fd2531835938daa4a6c8d370ffbb0d1868e90453c6c184ec3fab174fd36d6be9336e95c670283ae325ad6958201fd8088aed6aa4d2f9adca64fe7b66e5ec32b4d2162371e3a82a3beea", @ANYBLOB="6d62d543d100fe9c2f5f2498e5a86895a85cccb1b47f52683e45f1cea2b9dea7bedd885b6c32c1e440640255fe5666d32898060c23bd0faac0465772049e35a6084737eb2b12485ebee684a37f3204a8db0fb48330fb119471d5ba396048212186e43b0c6964c132545bc85223b8952ac551ca10e545477512bf184944360f278ea975603d801b84bb1b7267d93806a640d8f8161ec6a696c0140f0ebe90c0ca23b22c34a5542ce713febebefca2cbdbce56315f809527fba3b464974d5721b41d92ec07657d68bbfbbb34defbdb8f1f92a3d1c175296dd4bd8c3e4db336c5dfc18b86", @ANYBLOB="100000000000002500000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x95, &(0x7f0000000180)=""/149}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000000cae4a00c57a9f8c4bcaeddc23f000000008848000803000000000000000f0000000000000003001d000000000000007e42037bb6570b6a66b028c6e96d648317310b82bf54f6ba458849486e014a64a99ecde5ec2d5403a53c218e000000000000ab4ca3de91c79487f8185bb7aadfed1dae791c03c985fcf75ff7400ace39e5d6e699eb5a46147ad770bd27799ebd7cd1f143bb1e197ec1d1eaca5d06baef206f304d05e3a1877274387f01eca3cbe780ce0a1d4c"], 0x0) pipe2(&(0x7f0000000000), 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)={0x3c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x3c}}, 0x0) 1.189711212s ago: executing program 0 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}]}, 0x58}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) landlock_create_ruleset(0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x66) mount$nfs4(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[]) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 1.189508004s ago: executing program 0 (id=244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000010000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.06141887s ago: executing program 0 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 1.061004939s ago: executing program 0 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) chdir(&(0x7f0000002340)='./bus\x00') r1 = open(&(0x7f0000007f80)='./bus\x00', 0x141142, 0x0) ftruncate(r1, 0x2007ffb) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 821.903483ms ago: executing program 0 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) 631.186912ms ago: executing program 1 (id=248): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e4e22560c"], 0x7) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x37}, @l2cap_cid_signaling={{0x33}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x49, 0x2}, {0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x79, 0x2}, {0x9}}, @l2cap_move_chan_req={{0xe, 0xc, 0x3}, {0x7, 0xd}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0xcc43, 0xf549, 0x100, 0x5}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0x7fff, 0x0, 0x2, 0x4f4}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x7, 0x101}}]}}, 0x3c) syz_emit_vhci(0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000029c0)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xc4, r1, 0x400, 0x70bd25, 0xa5dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "df23f700a8b50bf4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4902c9c0d5931e691507c899faf41370298d00"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="948b3e98c888c88a33cacdb0770000a6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "661f83ecad25a51e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6ff889af5cf1ebe0d35a6817e13c3371fecdeb6d210a66b4bab53b8402d93f72"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f1dbfbce65c8d020c4157928ab3626c1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x20000400}]}]}, 0xc4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe4e}}, 0x4040001) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="df9410e2b3956e80bc3aa4847ecce9e0ca44d5845e69669c9864104576daa895910737a5b6ec2bc98d8a83251946890552f9aa43ad2ac23aa0407d5c1b8b3671a1d0c0df1be9f97aeaf604cd0c9fdbf97e87f2b82cb2c17810658a5b9d4733506070cc26127b234861d673a4adc99acadb72f1d17635164a3e96d9b83a887deb0df0887b2e6121f80fda17d2f54842f26f491f53e04de7649f54e8e220148fa5a659821e28ccc41a5610a4e3410d5a7d1ac8430d0d4c8884c2eb5cdef28ac6be16656b35b3e3cc95", 0xc8}, {&(0x7f0000000040)="4c3b4c3eb00ca4e04a96d3295871e209b97a13b37bc78e", 0x17}], 0x2}, 0x2000c001) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x1, 0x3, 0x3, 0x0, 0x3f}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x68, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) 439.108333ms ago: executing program 2 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 316.955239ms ago: executing program 2 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {0x5}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000001265161424eba6c895f60d00560d5b0af9b8800a9c523d6572b1fbf1f375ea488e599e9230effd97f820d36911432d4226e7ce907b425320311a7fffc51f40000000008258ed28072d462eadc8572ad0f13a5e7800"/102, @ANYRES16=r3, @ANYBLOB="00022abd7000fcdbdf250c0000000c00990005000000010000000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x8805) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x68, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x5014, @val, @val, @val={0x3, 0x1, 0xa}, @val={0x4, 0x6}, @void, @val={0x5, 0x3, {0x4, 0xae}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0xa1, 0x4}}, @void, @void, @void, @void}}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xd4, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x74}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x58, 0x1, "5db058d3ab6cb45bafefa9f925de88acb891fd5a6aa84bcb90d683e278af538d94c31525b8e84c97be0f51a74d35e0df093f256d1f7aa6ea05fbf66808ad50df1a6228d4e035f61e8e5cea301f84879062f4b3b8"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fff}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe60a}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x40}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) 240.116326ms ago: executing program 2 (id=251): unshare(0x20000400) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040), 0x10) 191.2872ms ago: executing program 2 (id=252): r0 = socket(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000000c0)=0x4, 0x4) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @sco={0x1f, @none}, @qipcrtr, @phonet={0x23, 0x3, 0x0, 0x5}, 0x7, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)='hsr0\x00', 0x8016, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x84044d0f, &(0x7f0000000240)) 100.891792ms ago: executing program 3 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}]}, 0x58}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) landlock_create_ruleset(0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x66) mount$nfs4(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 0s ago: executing program 3 (id=254): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000010000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5585' (ED25519) to the list of known hosts. [ 42.003453][ T5114] cgroup: Unknown subsys name 'net' [ 42.140000][ T5114] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.184514][ T5114] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.879192][ T5204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.882580][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.885858][ T5204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.889705][ T5205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.898244][ T5204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.900347][ T5208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.901661][ T5204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.903886][ T5209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.911180][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.915680][ T5204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.919862][ T5209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.919972][ T5204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.923198][ T5209] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 47.926440][ T5204] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 47.928746][ T5208] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 47.932097][ T5204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.934609][ T5209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.944518][ T5209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.966641][ T5209] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.971081][ T5209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.974920][ T5209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.980203][ T5209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.988148][ T5209] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.001008][ T5209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.233722][ T5197] chnl_net:caif_netlink_parms(): no params data found [ 48.333271][ T5196] chnl_net:caif_netlink_parms(): no params data found [ 48.479441][ T5198] chnl_net:caif_netlink_parms(): no params data found [ 48.498155][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.502583][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.505443][ T5197] bridge_slave_0: entered allmulticast mode [ 48.509364][ T5197] bridge_slave_0: entered promiscuous mode [ 48.543330][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.546438][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.549478][ T5197] bridge_slave_1: entered allmulticast mode [ 48.552608][ T5197] bridge_slave_1: entered promiscuous mode [ 48.688981][ T5197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.697843][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.701312][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.704047][ T5196] bridge_slave_0: entered allmulticast mode [ 48.707036][ T5196] bridge_slave_0: entered promiscuous mode [ 48.711375][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.714253][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.717009][ T5196] bridge_slave_1: entered allmulticast mode [ 48.719777][ T5196] bridge_slave_1: entered promiscuous mode [ 48.724402][ T5197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.814653][ T5210] chnl_net:caif_netlink_parms(): no params data found [ 48.861402][ T5196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.872312][ T5196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.878898][ T5197] team0: Port device team_slave_0 added [ 48.881940][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.885219][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.888497][ T5198] bridge_slave_0: entered allmulticast mode [ 48.892636][ T5198] bridge_slave_0: entered promiscuous mode [ 48.900144][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.903400][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.906540][ T5198] bridge_slave_1: entered allmulticast mode [ 48.910426][ T5198] bridge_slave_1: entered promiscuous mode [ 48.944158][ T5197] team0: Port device team_slave_1 added [ 49.096319][ T5196] team0: Port device team_slave_0 added [ 49.100183][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.103370][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.115053][ T5197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.130122][ T5198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.136187][ T5196] team0: Port device team_slave_1 added [ 49.139752][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.142947][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.154296][ T5197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.171247][ T5198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.285166][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.288063][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.298294][ T5196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.306100][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.308447][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.318827][ T5196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.424924][ T5198] team0: Port device team_slave_0 added [ 49.431458][ T5197] hsr_slave_0: entered promiscuous mode [ 49.434179][ T5197] hsr_slave_1: entered promiscuous mode [ 49.438013][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.443029][ T5210] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.445899][ T5210] bridge_slave_0: entered allmulticast mode [ 49.449483][ T5210] bridge_slave_0: entered promiscuous mode [ 49.454543][ T5210] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.457646][ T5210] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.460909][ T5210] bridge_slave_1: entered allmulticast mode [ 49.464225][ T5210] bridge_slave_1: entered promiscuous mode [ 49.493898][ T5198] team0: Port device team_slave_1 added [ 49.537175][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.540111][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.551355][ T5198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.578467][ T5210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.632419][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.635081][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.644836][ T5198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.674573][ T5210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.683738][ T5196] hsr_slave_0: entered promiscuous mode [ 49.686644][ T5196] hsr_slave_1: entered promiscuous mode [ 49.689662][ T5196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.693190][ T5196] Cannot create hsr debugfs directory [ 49.796091][ T5210] team0: Port device team_slave_0 added [ 49.802406][ T5210] team0: Port device team_slave_1 added [ 49.916285][ T5198] hsr_slave_0: entered promiscuous mode [ 49.919218][ T5198] hsr_slave_1: entered promiscuous mode [ 49.924697][ T5198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.927964][ T5198] Cannot create hsr debugfs directory [ 49.960454][ T5210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.963646][ T5210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.974206][ T5210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.981495][ T4636] Bluetooth: hci0: command tx timeout [ 49.982703][ T5210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.986844][ T5210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.997879][ T5210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.997985][ T4636] Bluetooth: hci1: command tx timeout [ 49.998236][ T5209] Bluetooth: hci2: command tx timeout [ 50.071075][ T4636] Bluetooth: hci3: command tx timeout [ 50.221936][ T5210] hsr_slave_0: entered promiscuous mode [ 50.224821][ T5210] hsr_slave_1: entered promiscuous mode [ 50.227663][ T5210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.234395][ T5210] Cannot create hsr debugfs directory [ 50.404633][ T5197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.422545][ T5197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.428909][ T5197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.436067][ T5197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.523366][ T5196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.535188][ T5196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.542942][ T5196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.548056][ T5196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.603858][ T5198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.609893][ T5198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.618032][ T5198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.624115][ T5198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.725803][ T5210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.732650][ T5210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.738883][ T5210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.745972][ T5210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.787469][ T5197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.824288][ T5197] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.842759][ T5196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.854862][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.857422][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.882579][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.885674][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.915029][ T5198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.922007][ T5196] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.950369][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.953471][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.974158][ T5198] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.983877][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.987349][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.007929][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.011182][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.029862][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.033182][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.045052][ T5210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.108054][ T5210] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.152634][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.155663][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.160415][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.163572][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.192022][ T5197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.225740][ T5210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.260092][ T5197] veth0_vlan: entered promiscuous mode [ 51.277242][ T5197] veth1_vlan: entered promiscuous mode [ 51.286411][ T5198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.326357][ T5196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.373298][ T5197] veth0_macvtap: entered promiscuous mode [ 51.382568][ T5197] veth1_macvtap: entered promiscuous mode [ 51.387285][ T5198] veth0_vlan: entered promiscuous mode [ 51.397233][ T5198] veth1_vlan: entered promiscuous mode [ 51.416124][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.424420][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.430271][ T5197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.436440][ T5197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.440206][ T5197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.444286][ T5197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.491231][ T5210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.496592][ T5196] veth0_vlan: entered promiscuous mode [ 51.514841][ T5198] veth0_macvtap: entered promiscuous mode [ 51.520352][ T5198] veth1_macvtap: entered promiscuous mode [ 51.532754][ T5196] veth1_vlan: entered promiscuous mode [ 51.548392][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.554044][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.559390][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.580184][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.589163][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.614649][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.618813][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.626712][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.635613][ T5198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.639315][ T5198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.644183][ T5198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.647723][ T5198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.657707][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.662715][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.680896][ T5210] veth0_vlan: entered promiscuous mode [ 51.687870][ T5210] veth1_vlan: entered promiscuous mode [ 51.716992][ T5196] veth0_macvtap: entered promiscuous mode [ 51.727784][ T5196] veth1_macvtap: entered promiscuous mode [ 51.767642][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.773209][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.777034][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.781573][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.788364][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.808048][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.808807][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.815561][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.818055][ T5210] veth0_macvtap: entered promiscuous mode [ 51.834945][ T5210] veth1_macvtap: entered promiscuous mode [ 51.839481][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.844565][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.848629][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.853296][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.859969][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.891314][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.893475][ T5196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.894555][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.897305][ T5196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.905465][ T5196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.909013][ T5196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.923439][ T5210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.927179][ T5210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.931195][ T5210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.934952][ T5210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.939274][ T5210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.943888][ T5210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.949505][ T5210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.969230][ T5210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.974421][ T5210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.978509][ T5210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.983167][ T5210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.987178][ T5210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.993448][ T5210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.005766][ T5210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.035735][ T5210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.039646][ T5210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.044453][ T5210] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.048290][ T5210] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.061099][ T4636] Bluetooth: hci2: command tx timeout [ 52.061177][ T5209] Bluetooth: hci1: command tx timeout [ 52.061217][ T65] Bluetooth: hci0: command tx timeout [ 52.145806][ T5209] Bluetooth: hci3: command tx timeout [ 52.152986][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.156391][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.184282][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.191922][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.218581][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.225842][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.239365][ T5266] process 'syz.2.3' launched './file2' with NULL argv: empty string added [ 52.265571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.269152][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.471816][ T5264] vivid-000: ================= START STATUS ================= [ 52.476275][ T5264] vivid-000: Radio HW Seek Mode: Bounded [ 52.479322][ T5264] vivid-000: Radio Programmable HW Seek: false [ 52.482251][ T5274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 52.482396][ T5264] vivid-000: RDS Rx I/O Mode: Block I/O [ 52.488392][ T5264] vivid-000: Generate RBDS Instead of RDS: false [ 52.491675][ T5264] vivid-000: RDS Reception: true [ 52.493886][ T5264] vivid-000: RDS Program Type: 0 inactive [ 52.496354][ T5264] vivid-000: RDS PS Name: inactive [ 52.498621][ T5264] vivid-000: RDS Radio Text: inactive [ 52.502743][ T5264] vivid-000: RDS Traffic Announcement: false inactive [ 52.506128][ T5264] vivid-000: RDS Traffic Program: false inactive [ 52.508972][ T5264] vivid-000: RDS Music: false inactive [ 52.512147][ T5264] vivid-000: ================== END STATUS ================== [ 52.533755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.862374][ T5272] vivid-001: ================= START STATUS ================= [ 52.871086][ T5272] vivid-001: Radio HW Seek Mode: Bounded [ 52.873757][ T5272] vivid-001: Radio Programmable HW Seek: false [ 52.876833][ T5272] vivid-001: RDS Rx I/O Mode: Block I/O [ 52.879145][ T5272] vivid-001: Generate RBDS Instead of RDS: false [ 52.882934][ T5272] vivid-001: RDS Reception: true [ 52.885109][ T5272] vivid-001: RDS Program Type: 0 inactive [ 52.887035][ T5272] vivid-001: RDS PS Name: inactive [ 52.889956][ T5272] vivid-001: RDS Radio Text: inactive [ 52.901977][ T5272] vivid-001: RDS Traffic Announcement: false inactive [ 52.907849][ T5272] vivid-001: RDS Traffic Program: false inactive [ 52.927383][ T5272] vivid-001: RDS Music: false inactive [ 52.935088][ T5272] vivid-001: ================== END STATUS ================== [ 53.250693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 53.354254][ T5282] sp0: Synchronizing with TNC [ 53.493659][ T5280] tipc: Started in network mode [ 53.496098][ T5280] tipc: Node identity a2b996bdf1ad, cluster identity 4711 [ 53.499468][ T5280] tipc: Enabled bearer , priority 0 [ 53.900529][ T5289] vivid-001: ================= START STATUS ================= [ 53.903572][ T5289] vivid-001: Radio HW Seek Mode: Bounded [ 53.905827][ T5289] vivid-001: Radio Programmable HW Seek: false [ 53.908295][ T5289] vivid-001: RDS Rx I/O Mode: Block I/O [ 53.912602][ T5289] vivid-001: Generate RBDS Instead of RDS: false [ 53.915566][ T5289] vivid-001: RDS Reception: true [ 53.918995][ T5289] vivid-001: RDS Program Type: 0 inactive [ 53.924295][ T5289] vivid-001: RDS PS Name: inactive [ 53.926663][ T5289] vivid-001: RDS Radio Text: inactive [ 53.929724][ T5289] vivid-001: RDS Traffic Announcement: false inactive [ 53.944456][ T5289] vivid-001: RDS Traffic Program: false inactive [ 53.948823][ T5289] vivid-001: RDS Music: false inactive [ 53.951618][ T5289] vivid-001: ================== END STATUS ================== [ 54.145562][ T5209] Bluetooth: hci2: command tx timeout [ 54.157634][ T5209] Bluetooth: hci0: command tx timeout [ 54.161207][ T5279] tipc: Resetting bearer [ 54.210795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.220713][ T5209] Bluetooth: hci3: command tx timeout [ 54.222746][ T5279] tipc: Disabling bearer [ 54.306862][ T5299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 54.343157][ T5283] [U] è` [ 54.480791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.697170][ T5305] vivid-002: ================= START STATUS ================= [ 54.700862][ T5305] vivid-002: Radio HW Seek Mode: Bounded [ 54.703513][ T5305] vivid-002: Radio Programmable HW Seek: false [ 54.706588][ T5305] vivid-002: RDS Rx I/O Mode: Block I/O [ 54.708974][ T5305] vivid-002: Generate RBDS Instead of RDS: false [ 54.712028][ T5305] vivid-002: RDS Reception: true [ 54.714281][ T5305] vivid-002: RDS Program Type: 0 inactive [ 54.717115][ T5305] vivid-002: RDS PS Name: inactive [ 54.719454][ T5305] vivid-002: RDS Radio Text: inactive [ 54.722362][ T5305] vivid-002: RDS Traffic Announcement: false inactive [ 54.725429][ T5305] vivid-002: RDS Traffic Program: false inactive [ 54.728723][ T5305] vivid-002: RDS Music: false inactive [ 54.731965][ T5305] vivid-002: ================== END STATUS ================== [ 55.216330][ T5312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 55.500756][ T5209] Bluetooth: hci1: command tx timeout [ 55.888519][ T5317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 56.015428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.126514][ T5318] vivid-002: ================= START STATUS ================= [ 56.129866][ T5318] vivid-002: Radio HW Seek Mode: Bounded [ 56.132408][ T5318] vivid-002: Radio Programmable HW Seek: false [ 56.136934][ T5318] vivid-002: RDS Rx I/O Mode: Block I/O [ 56.139250][ T5318] vivid-002: Generate RBDS Instead of RDS: false [ 56.142601][ T5318] vivid-002: RDS Reception: true [ 56.144824][ T5318] vivid-002: RDS Program Type: 0 inactive [ 56.147264][ T5318] vivid-002: RDS PS Name: inactive [ 56.149515][ T5318] vivid-002: RDS Radio Text: inactive [ 56.151966][ T5318] vivid-002: RDS Traffic Announcement: false inactive [ 56.160435][ T5318] vivid-002: RDS Traffic Program: false inactive [ 56.163340][ T5318] vivid-002: RDS Music: false inactive [ 56.165752][ T5318] vivid-002: ================== END STATUS ================== [ 56.224691][ T5209] Bluetooth: hci0: command tx timeout [ 56.224857][ T4636] Bluetooth: hci2: command tx timeout [ 56.302198][ T4636] Bluetooth: hci3: command tx timeout [ 56.425160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.619758][ T5325] vivid-002: ================= START STATUS ================= [ 56.623081][ T5325] vivid-002: Radio HW Seek Mode: Bounded [ 56.625407][ T5325] vivid-002: Radio Programmable HW Seek: false [ 56.627882][ T5325] vivid-002: RDS Rx I/O Mode: Block I/O [ 56.632019][ T5325] vivid-002: Generate RBDS Instead of RDS: false [ 56.634563][ T5325] vivid-002: RDS Reception: true [ 56.636741][ T5325] vivid-002: RDS Program Type: 0 inactive [ 56.639301][ T5325] vivid-002: RDS PS Name: inactive [ 56.641949][ T5325] vivid-002: RDS Radio Text: inactive [ 56.644385][ T5325] vivid-002: RDS Traffic Announcement: false inactive [ 56.647294][ T5325] vivid-002: RDS Traffic Program: false inactive [ 56.649948][ T5325] vivid-002: RDS Music: false inactive [ 56.652635][ T5325] vivid-002: ================== END STATUS ================== [ 56.846512][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 57.200864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.204944][ T5333] vivid-003: ================= START STATUS ================= [ 57.208176][ T5333] vivid-003: Radio HW Seek Mode: Bounded [ 57.210889][ T5333] vivid-003: Radio Programmable HW Seek: false [ 57.213704][ T5333] vivid-003: RDS Rx I/O Mode: Block I/O [ 57.216194][ T5333] vivid-003: Generate RBDS Instead of RDS: false [ 57.218987][ T5333] vivid-003: RDS Reception: true [ 57.221348][ T5333] vivid-003: RDS Program Type: 0 inactive [ 57.223930][ T5333] vivid-003: RDS PS Name: inactive [ 57.225953][ T5333] vivid-003: RDS Radio Text: inactive [ 57.227687][ T5333] vivid-003: RDS Traffic Announcement: false inactive [ 57.229826][ T5333] vivid-003: RDS Traffic Program: false inactive [ 57.232142][ T5333] vivid-003: RDS Music: false inactive [ 57.234005][ T5333] vivid-003: ================== END STATUS ================== [ 57.237249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.741365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 57.810625][ T5342] vivid-001: ================= START STATUS ================= [ 57.813453][ T5342] vivid-001: Radio HW Seek Mode: Bounded [ 57.815595][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.825291][ T5342] vivid-001: Radio Programmable HW Seek: false [ 57.827764][ T5342] vivid-001: RDS Rx I/O Mode: Block I/O [ 57.830153][ T5342] vivid-001: Generate RBDS Instead of RDS: false [ 57.833313][ T5342] vivid-001: RDS Reception: true [ 57.835084][ T5342] vivid-001: RDS Program Type: 0 inactive [ 57.838126][ T5342] vivid-001: RDS PS Name: inactive [ 57.840407][ T5342] vivid-001: RDS Radio Text: inactive [ 57.845759][ T5342] vivid-001: RDS Traffic Announcement: false inactive [ 57.848954][ T5342] vivid-001: RDS Traffic Program: false inactive [ 57.852631][ T5342] vivid-001: RDS Music: false inactive [ 57.854797][ T5342] vivid-001: ================== END STATUS ================== [ 58.010969][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 58.038385][ T56] usb 6-1: config 0 has no interfaces? [ 58.042534][ T56] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=a3.b6 [ 58.045763][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.051644][ T56] usb 6-1: Product: syz [ 58.053490][ T56] usb 6-1: Manufacturer: syz [ 58.055465][ T56] usb 6-1: SerialNumber: syz [ 58.064257][ T56] usb 6-1: config 0 descriptor?? [ 58.292890][ T25] usb 6-1: USB disconnect, device number 2 [ 58.380589][ T4636] Bluetooth: hci3: command tx timeout [ 58.450724][ T5345] vivid-000: ================= START STATUS ================= [ 58.453904][ T5345] vivid-000: Radio HW Seek Mode: Bounded [ 58.456012][ T5345] vivid-000: Radio Programmable HW Seek: false [ 58.458588][ T5345] vivid-000: RDS Rx I/O Mode: Block I/O [ 58.461618][ T5345] vivid-000: Generate RBDS Instead of RDS: false [ 58.463968][ T5345] vivid-000: RDS Reception: true [ 58.466019][ T5345] vivid-000: RDS Program Type: 0 inactive [ 58.468240][ T5345] vivid-000: RDS PS Name: inactive [ 58.470375][ T5345] vivid-000: RDS Radio Text: inactive [ 58.473236][ T5345] vivid-000: RDS Traffic Announcement: false inactive [ 58.475664][ T5345] vivid-000: RDS Traffic Program: false inactive [ 58.477853][ T5345] vivid-000: RDS Music: false inactive [ 58.479801][ T5345] vivid-000: ================== END STATUS ================== [ 58.630394][ T5349] sp0: Synchronizing with TNC [ 58.702777][ T5348] [U] è` [ 58.887222][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 59.018774][ T5356] tipc: Started in network mode [ 59.023045][ T5356] tipc: Node identity 1a11b8efae63, cluster identity 4711 [ 59.026809][ T5356] tipc: Enabled bearer , priority 0 [ 59.391680][ T5360] sp0: Synchronizing with TNC [ 59.616100][ T5362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 59.687549][ T5350] [U] è` [ 59.748346][ T5355] tipc: Resetting bearer [ 59.763247][ T5355] tipc: Disabling bearer [ 59.970786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.002061][ T5371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.174927][ T5366] vivid-000: ================= START STATUS ================= [ 60.178240][ T5366] vivid-000: Radio HW Seek Mode: Bounded [ 60.193652][ T5366] vivid-000: Radio Programmable HW Seek: false [ 60.196278][ T5366] vivid-000: RDS Rx I/O Mode: Block I/O [ 60.199155][ T5366] vivid-000: Generate RBDS Instead of RDS: false [ 60.203002][ T5366] vivid-000: RDS Reception: true [ 60.205612][ T5366] vivid-000: RDS Program Type: 0 inactive [ 60.217790][ T5366] vivid-000: RDS PS Name: inactive [ 60.220138][ T5366] vivid-000: RDS Radio Text: inactive [ 60.224217][ T5366] vivid-000: RDS Traffic Announcement: false inactive [ 60.227495][ T5366] vivid-000: RDS Traffic Program: false inactive [ 60.237587][ T5366] vivid-000: RDS Music: false inactive [ 60.237615][ T5366] vivid-000: ================== END STATUS ================== [ 60.385664][ T5373] tipc: Started in network mode [ 60.388012][ T5373] tipc: Node identity 3ebf5e2f116d, cluster identity 4711 [ 60.391357][ T5373] tipc: Enabled bearer , priority 0 [ 60.680043][ T5378] vivid-000: ================= START STATUS ================= [ 60.684939][ T5378] vivid-000: Radio HW Seek Mode: Bounded [ 60.687951][ T5378] vivid-000: Radio Programmable HW Seek: false [ 60.693206][ T5378] vivid-000: RDS Rx I/O Mode: Block I/O [ 60.697265][ T5378] vivid-000: Generate RBDS Instead of RDS: false [ 60.700020][ T5378] vivid-000: RDS Reception: true [ 60.703144][ T5378] vivid-000: RDS Program Type: 0 inactive [ 60.705668][ T5378] vivid-000: RDS PS Name: inactive [ 60.713153][ T5378] vivid-000: RDS Radio Text: inactive [ 60.716094][ T5378] vivid-000: RDS Traffic Announcement: false inactive [ 60.722384][ T5378] vivid-000: RDS Traffic Program: false inactive [ 60.725407][ T5378] vivid-000: RDS Music: false inactive [ 60.728293][ T5378] vivid-000: ================== END STATUS ================== [ 60.732562][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 60.735826][ T4636] Bluetooth: Wrong link type (-22) [ 60.738950][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 60.738964][ T4636] Bluetooth: Wrong link type (-22) [ 60.822658][ T5385] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.945419][ T4636] Bluetooth: hci0: command tx timeout [ 61.155338][ T5372] tipc: Resetting bearer [ 61.169621][ T5372] tipc: Disabling bearer [ 61.342920][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.430624][ T5389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.522506][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 61.527611][ T56] usb 7-1: config 0 has no interfaces? [ 61.534293][ T56] usb 7-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=a3.b6 [ 61.562274][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.565854][ T56] usb 7-1: Product: syz [ 61.567986][ T56] usb 7-1: Manufacturer: syz [ 61.570376][ T56] usb 7-1: SerialNumber: syz [ 61.577139][ T56] usb 7-1: config 0 descriptor?? [ 61.588805][ T5391] sp0: Synchronizing with TNC [ 61.651145][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 61.675834][ T5390] [U] è` [ 61.791875][ T56] usb 7-1: USB disconnect, device number 2 [ 61.892982][ T5395] tipc: Enabled bearer , priority 0 [ 62.392709][ T4636] Bluetooth: hci1: command tx timeout [ 62.456113][ T5402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 62.733562][ T5394] tipc: Resetting bearer [ 62.802128][ T5394] tipc: Disabling bearer [ 62.829235][ T5405] vivid-003: ================= START STATUS ================= [ 62.832724][ T5405] vivid-003: Radio HW Seek Mode: Bounded [ 62.835242][ T5405] vivid-003: Radio Programmable HW Seek: false [ 62.838005][ T5405] vivid-003: RDS Rx I/O Mode: Block I/O [ 62.843560][ T5405] vivid-003: Generate RBDS Instead of RDS: false [ 62.846109][ T5405] vivid-003: RDS Reception: true [ 62.848037][ T5405] vivid-003: RDS Program Type: 0 inactive [ 62.850172][ T5405] vivid-003: RDS PS Name: inactive [ 62.853104][ T5405] vivid-003: RDS Radio Text: inactive [ 62.855607][ T5405] vivid-003: RDS Traffic Announcement: false inactive [ 62.858549][ T5405] vivid-003: RDS Traffic Program: false inactive [ 62.864600][ T5405] vivid-003: RDS Music: false inactive [ 62.867347][ T5405] vivid-003: ================== END STATUS ================== [ 63.017103][ T5411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.205817][ T5414] vivid-000: ================= START STATUS ================= [ 63.209220][ T5414] vivid-000: Radio HW Seek Mode: Bounded [ 63.212256][ T5414] vivid-000: Radio Programmable HW Seek: false [ 63.215064][ T5414] vivid-000: RDS Rx I/O Mode: Block I/O [ 63.217552][ T5414] vivid-000: Generate RBDS Instead of RDS: false [ 63.220341][ T5414] vivid-000: RDS Reception: true [ 63.223241][ T5414] vivid-000: RDS Program Type: 0 inactive [ 63.225774][ T5414] vivid-000: RDS PS Name: inactive [ 63.228306][ T5414] vivid-000: RDS Radio Text: inactive [ 63.231346][ T5414] vivid-000: RDS Traffic Announcement: false inactive [ 63.234371][ T5414] vivid-000: RDS Traffic Program: false inactive [ 63.237175][ T5414] vivid-000: RDS Music: false inactive [ 63.239594][ T5414] vivid-000: ================== END STATUS ================== [ 63.424412][ T5418] tipc: Enabled bearer , priority 0 [ 63.584336][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 63.587331][ T4636] Bluetooth: Wrong link type (-22) [ 63.589734][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 63.594727][ T4636] Bluetooth: Wrong link type (-22) [ 63.901227][ T4636] Bluetooth: hci3: command tx timeout [ 64.258469][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.276477][ T5417] tipc: Resetting bearer [ 64.313011][ T5417] tipc: Disabling bearer [ 64.527848][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 64.700729][ T56] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.892272][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 64.898870][ T56] usb 6-1: config 0 has no interfaces? [ 64.912444][ T56] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=a3.b6 [ 64.917698][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.925613][ T56] usb 6-1: Product: syz [ 64.927684][ T56] usb 6-1: Manufacturer: syz [ 64.929956][ T56] usb 6-1: SerialNumber: syz [ 64.935929][ T56] usb 6-1: config 0 descriptor?? [ 65.146814][ T5237] usb 6-1: USB disconnect, device number 3 [ 65.420785][ T4636] Bluetooth: hci0: command tx timeout [ 65.426093][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 65.498361][ T5440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.51'. [ 65.835804][ T5445] vivid-003: ================= START STATUS ================= [ 65.838895][ T5445] vivid-003: Radio HW Seek Mode: Bounded [ 65.846964][ T5445] vivid-003: Radio Programmable HW Seek: false [ 65.849481][ T5445] vivid-003: RDS Rx I/O Mode: Block I/O [ 65.852153][ T5445] vivid-003: Generate RBDS Instead of RDS: false [ 65.854738][ T5445] vivid-003: RDS Reception: true [ 65.856927][ T5445] vivid-003: RDS Program Type: 0 inactive [ 65.859406][ T5445] vivid-003: RDS PS Name: inactive [ 65.865423][ T5445] vivid-003: RDS Radio Text: inactive [ 65.868202][ T5445] vivid-003: RDS Traffic Announcement: false inactive [ 65.871191][ T5445] vivid-003: RDS Traffic Program: false inactive [ 65.873938][ T5445] vivid-003: RDS Music: false inactive [ 65.876321][ T5445] vivid-003: ================== END STATUS ================== [ 67.264856][ T5449] vivid-001: ================= START STATUS ================= [ 67.267533][ T5449] vivid-001: Radio HW Seek Mode: Bounded [ 67.278218][ T5449] vivid-001: Radio Programmable HW Seek: false [ 67.283462][ T5449] vivid-001: RDS Rx I/O Mode: Block I/O [ 67.285776][ T5449] vivid-001: Generate RBDS Instead of RDS: false [ 67.289000][ T5449] vivid-001: RDS Reception: true [ 67.293828][ T5449] vivid-001: RDS Program Type: 0 inactive [ 67.298282][ T5449] vivid-001: RDS PS Name: inactive [ 67.301310][ T5449] vivid-001: RDS Radio Text: inactive [ 67.303603][ T5449] vivid-001: RDS Traffic Announcement: false inactive [ 67.306443][ T5449] vivid-001: RDS Traffic Program: false inactive [ 67.309163][ T5449] vivid-001: RDS Music: false inactive [ 67.318035][ T5449] vivid-001: ================== END STATUS ================== [ 67.603057][ T5454] vivid-000: ================= START STATUS ================= [ 67.606379][ T5454] vivid-000: Radio HW Seek Mode: Bounded [ 67.608471][ T5454] vivid-000: Radio Programmable HW Seek: false [ 67.610389][ T5454] vivid-000: RDS Rx I/O Mode: Block I/O [ 67.612321][ T5454] vivid-000: Generate RBDS Instead of RDS: false [ 67.614538][ T5454] vivid-000: RDS Reception: true [ 67.616514][ T5454] vivid-000: RDS Program Type: 0 inactive [ 67.619113][ T5454] vivid-000: RDS PS Name: inactive [ 67.621657][ T5454] vivid-000: RDS Radio Text: inactive [ 67.624159][ T5454] vivid-000: RDS Traffic Announcement: false inactive [ 67.627237][ T5454] vivid-000: RDS Traffic Program: false inactive [ 67.630085][ T5454] vivid-000: RDS Music: false inactive [ 67.632560][ T5454] vivid-000: ================== END STATUS ================== [ 67.785195][ T5458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.469778][ T5467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.58'. [ 68.825104][ T5471] vivid-000: ================= START STATUS ================= [ 68.844828][ T5471] vivid-000: Radio HW Seek Mode: Bounded [ 68.848179][ T5471] vivid-000: Radio Programmable HW Seek: false [ 68.857823][ T5471] vivid-000: RDS Rx I/O Mode: Block I/O [ 68.861852][ T5471] vivid-000: Generate RBDS Instead of RDS: false [ 68.876613][ T5471] vivid-000: RDS Reception: true [ 68.879030][ T5471] vivid-000: RDS Program Type: 0 inactive [ 68.950993][ T5471] vivid-000: RDS PS Name: inactive [ 68.953831][ T5471] vivid-000: RDS Radio Text: inactive [ 68.956269][ T5471] vivid-000: RDS Traffic Announcement: false inactive [ 68.959221][ T5471] vivid-000: RDS Traffic Program: false inactive [ 68.962110][ T5471] vivid-000: RDS Music: false inactive [ 68.964735][ T5471] vivid-000: ================== END STATUS ================== [ 68.995231][ T5472] vivid-001: ================= START STATUS ================= [ 69.000250][ T5472] vivid-001: Radio HW Seek Mode: Bounded [ 69.013229][ T5472] vivid-001: Radio Programmable HW Seek: false [ 69.016016][ T5472] vivid-001: RDS Rx I/O Mode: Block I/O [ 69.036295][ T5472] vivid-001: Generate RBDS Instead of RDS: false [ 69.039319][ T5472] vivid-001: RDS Reception: true [ 69.042044][ T5472] vivid-001: RDS Program Type: 0 inactive [ 69.044625][ T5472] vivid-001: RDS PS Name: inactive [ 69.047818][ T5472] vivid-001: RDS Radio Text: inactive [ 69.054087][ T5472] vivid-001: RDS Traffic Announcement: false inactive [ 69.059842][ T5472] vivid-001: RDS Traffic Program: false inactive [ 69.059868][ T5472] vivid-001: RDS Music: false inactive [ 69.060351][ T5472] vivid-001: ================== END STATUS ================== [ 69.152702][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 69.158308][ T4636] Bluetooth: Wrong link type (-22) [ 69.160386][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 69.163494][ T4636] Bluetooth: Wrong link type (-22) [ 70.256549][ T39] audit: type=1326 audit(1720993428.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.270566][ T39] audit: type=1326 audit(1720993428.270:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.279722][ T39] audit: type=1326 audit(1720993428.270:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.305785][ T39] audit: type=1326 audit(1720993428.270:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.314753][ T39] audit: type=1326 audit(1720993428.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.324555][ T39] audit: type=1326 audit(1720993428.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.333800][ T39] audit: type=1326 audit(1720993428.270:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.344280][ T39] audit: type=1326 audit(1720993428.270:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.353511][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 70.355203][ T39] audit: type=1326 audit(1720993428.270:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.355784][ T4636] Bluetooth: Wrong link type (-22) [ 70.355832][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 70.369838][ T4636] Bluetooth: Wrong link type (-22) [ 70.370833][ T39] audit: type=1326 audit(1720993428.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.75" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 70.984923][ T5528] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET) [ 70.994974][ T5528] dccp_invalid_packet: P.CsCov 5 exceeds packet length 256 [ 71.018518][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 71.075555][ T5532] netlink: 128 bytes leftover after parsing attributes in process `syz.1.83'. [ 71.079233][ T5532] netlink: 132 bytes leftover after parsing attributes in process `syz.1.83'. [ 71.186587][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 71.209924][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 71.269549][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.272257][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.330042][ T9] kernel write not supported for file /vcsa1 (pid: 9 comm: kworker/0:1) [ 73.341841][ T25] kernel write not supported for file /vcsa1 (pid: 25 comm: kworker/2:0) [ 74.102379][ T5625] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.233723][ T5237] kernel write not supported for file /vcsa1 (pid: 5237 comm: kworker/2:3) [ 74.391830][ T4636] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 74.396176][ T4636] Bluetooth: hci1: Injecting HCI hardware error event [ 74.399946][ T4636] Bluetooth: hci1: hardware error 0x00 [ 74.466862][ T5641] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 75.297858][ T25] kernel write not supported for file /vcsa1 (pid: 25 comm: kworker/2:0) [ 75.351959][ T5660] Zero length message leads to an empty skb [ 75.398809][ T5664] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 76.480793][ T4636] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 77.014035][ T5708] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 77.103372][ T5712] netlink: 68 bytes leftover after parsing attributes in process `syz.3.147'. [ 77.117199][ T5712] Êü: entered promiscuous mode [ 77.407446][ T4636] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 77.437010][ T5725] Process accounting resumed [ 77.891103][ T5745] sit0: entered promiscuous mode [ 77.900790][ T5745] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 77.903936][ T5745] netlink: 1 bytes leftover after parsing attributes in process `syz.0.158'. [ 78.149678][ T4636] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 78.188741][ T5751] Process accounting resumed [ 79.242387][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.335125][ T5776] syz_tun: entered promiscuous mode [ 79.341484][ T5776] batadv_slave_0: entered promiscuous mode [ 79.413705][ T5781] netlink: 36 bytes leftover after parsing attributes in process `syz.3.170'. [ 79.673327][ T5791] tipc: Enabled bearer , priority 0 [ 80.504260][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 80.506930][ T4636] Bluetooth: Wrong link type (-22) [ 80.508896][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 80.512091][ T4636] Bluetooth: Wrong link type (-22) [ 80.515423][ T5790] tipc: Resetting bearer [ 80.532135][ T5790] tipc: Disabling bearer [ 80.734169][ T4636] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 80.768183][ T5829] Process accounting resumed [ 81.070607][ T5847] tipc: Enabled bearer , priority 0 [ 81.503366][ T8] cfg80211: failed to load regulatory.db [ 81.660662][ T4636] Bluetooth: hci0: command tx timeout [ 81.827610][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.830421][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.833366][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.835912][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.838629][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.843034][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.845607][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.848133][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.850991][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.853537][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.856064][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.858724][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.862253][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.866803][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.875721][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.879861][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.883140][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.886320][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.889232][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.892050][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.894551][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.897154][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.900198][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.905038][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.908352][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.911827][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.914461][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.917617][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.921257][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.924470][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.927256][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.930422][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.943070][ T8] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 81.947063][ T5846] tipc: Resetting bearer [ 81.958423][ T5846] tipc: Disabling bearer [ 82.098930][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 82.101994][ T4636] Bluetooth: Wrong link type (-22) [ 82.105065][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 82.107730][ T4636] Bluetooth: Wrong link type (-22) [ 82.690939][ T5893] tipc: Enabled bearer , priority 0 [ 83.012888][ T5899] vivid-002: ================= START STATUS ================= [ 83.015827][ T5899] vivid-002: Radio HW Seek Mode: Bounded [ 83.018090][ T5899] vivid-002: Radio Programmable HW Seek: false [ 83.020747][ T5899] vivid-002: RDS Rx I/O Mode: Block I/O [ 83.023424][ T5899] vivid-002: Generate RBDS Instead of RDS: false [ 83.025648][ T5899] vivid-002: RDS Reception: true [ 83.028455][ T5899] vivid-002: RDS Program Type: 0 inactive [ 83.030938][ T5899] vivid-002: RDS PS Name: inactive [ 83.033169][ T5899] vivid-002: RDS Radio Text: inactive [ 83.035223][ T5899] vivid-002: RDS Traffic Announcement: false inactive [ 83.037778][ T5899] vivid-002: RDS Traffic Program: false inactive [ 83.040230][ T5899] vivid-002: RDS Music: false inactive [ 83.042871][ T5899] vivid-002: ================== END STATUS ================== [ 83.440666][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 83.545906][ T5892] tipc: Resetting bearer [ 83.563010][ T5892] tipc: Disabling bearer [ 83.674221][ T5910] sp0: Synchronizing with TNC [ 84.085654][ T5920] vivid-003: ================= START STATUS ================= [ 84.089323][ T5920] vivid-003: Radio HW Seek Mode: Bounded [ 84.092617][ T5920] vivid-003: Radio Programmable HW Seek: false [ 84.095491][ T5920] vivid-003: RDS Rx I/O Mode: Block I/O [ 84.098624][ T5920] vivid-003: Generate RBDS Instead of RDS: false [ 84.104840][ T5920] vivid-003: RDS Reception: true [ 84.106988][ T5920] vivid-003: RDS Program Type: 0 inactive [ 84.109621][ T5920] vivid-003: RDS PS Name: inactive [ 84.112744][ T5920] vivid-003: RDS Radio Text: inactive [ 84.114946][ T5920] vivid-003: RDS Traffic Announcement: false inactive [ 84.118770][ T5920] vivid-003: RDS Traffic Program: false inactive [ 84.121759][ T5920] vivid-003: RDS Music: false inactive [ 84.126221][ T5920] vivid-003: ================== END STATUS ================== [ 84.515250][ T5901] [U] è` [ 84.753650][ T5921] vivid-002: ================= START STATUS ================= [ 84.757157][ T5921] vivid-002: Radio HW Seek Mode: Bounded [ 84.759841][ T5921] vivid-002: Radio Programmable HW Seek: false [ 84.763150][ T5921] vivid-002: RDS Rx I/O Mode: Block I/O [ 84.766057][ T5921] vivid-002: Generate RBDS Instead of RDS: false [ 84.768945][ T5921] vivid-002: RDS Reception: true [ 84.771587][ T5921] vivid-002: RDS Program Type: 0 inactive [ 84.773774][ T5921] vivid-002: RDS PS Name: inactive [ 84.776232][ T5921] vivid-002: RDS Radio Text: inactive [ 84.778510][ T5921] vivid-002: RDS Traffic Announcement: false inactive [ 84.783218][ T5921] vivid-002: RDS Traffic Program: false inactive [ 84.785625][ T5921] vivid-002: RDS Music: false inactive [ 84.787483][ T5921] vivid-002: ================== END STATUS ================== [ 85.047726][ T5939] tipc: Started in network mode [ 85.049990][ T5939] tipc: Node identity 565d74e4c22e, cluster identity 4711 [ 85.053691][ T5939] tipc: Enabled bearer , priority 0 [ 85.497599][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 85.499687][ T4636] Bluetooth: Wrong link type (-22) [ 85.501889][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 85.504270][ T4636] Bluetooth: Wrong link type (-22) [ 85.841996][ T5938] tipc: Resetting bearer [ 85.862471][ T5938] tipc: Disabling bearer [ 86.686509][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.689684][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.695318][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.701041][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.707350][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.719082][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.725684][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.732280][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.740529][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.744585][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.756993][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.762095][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.765197][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.772868][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.778522][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.787096][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.793256][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.799930][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.806725][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.813610][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.817950][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.823209][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.826614][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.829615][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.832797][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.835906][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.838734][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.842445][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.845371][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.848377][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.852203][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.855409][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.863525][ T9] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 87.020709][ T4636] Bluetooth: hci2: command tx timeout [ 87.295266][ T4636] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 87.312104][ T5982] Process accounting resumed [ 87.358675][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 87.361912][ T4636] Bluetooth: Wrong link type (-22) [ 87.364323][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 87.367218][ T4636] Bluetooth: Wrong link type (-22) [ 87.590733][ T5237] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 87.773103][ T5237] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.777496][ T5237] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.781452][ T5237] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 87.785191][ T5237] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.791883][ T5237] usb 8-1: config 0 descriptor?? [ 88.018788][ T5997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.241'. [ 88.220751][ T5237] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.223682][ T5237] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.227800][ T5237] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.230308][ T5237] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.235006][ T5237] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.237821][ T5237] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.241315][ T5237] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 88.265602][ T5237] arvo 0003:1E7D:30D4.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 88.306701][ T6009] evm: overlay not supported [ 88.315700][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 88.315714][ T39] audit: type=1804 audit(1720993446.330:71): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.246" name="/newroot/69/bus/bus" dev="overlay" ino=388 res=1 errno=0 [ 88.614311][ T35] usb 8-1: USB disconnect, device number 2 [ 88.669815][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 88.673513][ T4636] Bluetooth: Wrong link type (-22) [ 88.676180][ T4636] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 88.680354][ T4636] Bluetooth: Wrong link type (-22) [ 88.797407][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.800712][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.803435][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.806188][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.809253][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.813290][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.816734][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.820075][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.823645][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.827205][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.832077][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.835534][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.839120][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.843269][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.846495][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.849874][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.853936][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.857273][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.860934][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.864338][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.867597][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.871280][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.874476][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.877677][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.881417][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.884617][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.888605][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.892188][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.895422][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.898689][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.902478][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.905596][ T56] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.910946][ T56] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 88.970379][ T6021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.250'. [ 89.322256][ C0] [ 89.323359][ C0] ================================ [ 89.325539][ C0] WARNING: inconsistent lock state [ 89.327747][ C0] 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 Not tainted [ 89.333260][ C0] -------------------------------- [ 89.335446][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 89.344723][ C0] syz.0.247/6015 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 89.347402][ C0] ffff88802c038a80 (lock#13){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 89.351904][ C0] {HARDIRQ-ON-W} state was registered at: [ 89.354411][ C0] lock_acquire+0x1b1/0x560 [ 89.356473][ C0] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 89.359344][ C0] lock_mm_and_find_vma+0xeb/0x6a0 [ 89.361592][ C0] do_user_addr_fault+0x29c/0xe50 [ 89.363524][ C0] exc_page_fault+0x5c/0xc0 [ 89.365323][ C0] asm_exc_page_fault+0x26/0x30 [ 89.367294][ C0] _copy_to_user+0xa7/0xc0 [ 89.369267][ C0] rng_dev_read+0x24b/0x730 [ 89.371475][ C0] vfs_readv+0x6cb/0x8a0 [ 89.373416][ C0] do_preadv+0x1b2/0x260 [ 89.375272][ C0] __do_fast_syscall_32+0x73/0x120 [ 89.377576][ C0] do_fast_syscall_32+0x32/0x80 [ 89.379751][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.382531][ C0] irq event stamp: 149170 [ 89.384448][ C0] hardirqs last enabled at (149169): [] finish_task_switch.isra.0+0x217/0xcc0 [ 89.388911][ C0] hardirqs last disabled at (149170): [] sysvec_call_function_single+0xe/0xb0 [ 89.393395][ C0] softirqs last enabled at (148804): [] handle_softirqs+0x5be/0x8f0 [ 89.397354][ C0] softirqs last disabled at (148797): [] irq_exit_rcu+0xbb/0x120 [ 89.401001][ C0] [ 89.401001][ C0] other info that might help us debug this: [ 89.404230][ C0] Possible unsafe locking scenario: [ 89.404230][ C0] [ 89.407221][ C0] CPU0 [ 89.408703][ C0] ---- [ 89.410183][ C0] lock(lock#13); [ 89.411742][ C0] [ 89.413106][ C0] lock(lock#13); [ 89.414607][ C0] [ 89.414607][ C0] *** DEADLOCK *** [ 89.414607][ C0] [ 89.417864][ C0] 3 locks held by syz.0.247/6015: [ 89.420050][ C0] #0: ffff88802be82580 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x267/0xf50 [ 89.424262][ C0] #1: ffffffff8dbb4ea0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 89.428344][ C0] #2: ffff8880265fa798 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x28a/0x760 [ 89.432960][ C0] [ 89.432960][ C0] stack backtrace: [ 89.435487][ C0] CPU: 0 PID: 6015 Comm: syz.0.247 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 89.439806][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.444361][ C0] Call Trace: [ 89.445825][ C0] [ 89.447218][ C0] dump_stack_lvl+0x116/0x1f0 [ 89.449197][ C0] mark_lock+0x923/0xc60 [ 89.451030][ C0] ? __pfx_mark_lock+0x10/0x10 [ 89.453109][ C0] ? mark_lock+0xb5/0xc60 [ 89.454944][ C0] ? __pfx_mark_lock+0x10/0x10 [ 89.457027][ C0] ? __pfx_mark_lock+0x10/0x10 [ 89.459076][ C0] ? hlock_class+0x4e/0x130 [ 89.461019][ C0] ? mark_lock+0xb5/0xc60 [ 89.462903][ C0] ? hlock_class+0x4e/0x130 [ 89.464702][ C0] ? hlock_class+0x4e/0x130 [ 89.466499][ C0] ? hlock_class+0x4e/0x130 [ 89.468261][ C0] ? __lock_acquire+0xc5d/0x3b30 [ 89.470435][ C0] __lock_acquire+0x1359/0x3b30 [ 89.472657][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 89.475174][ C0] ? lock_acquire+0x1b1/0x560 [ 89.477300][ C0] lock_acquire+0x1b1/0x560 [ 89.479364][ C0] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 89.482289][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 89.484482][ C0] ? exc_int3+0xe/0x80 [ 89.486698][ C0] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 89.489608][ C0] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 89.492697][ C0] stack_map_get_build_id_offset+0x602/0x760 [ 89.495341][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 89.497624][ C0] ? lock_acquire+0x1b1/0x560 [ 89.499693][ C0] ? find_held_lock+0x2d/0x110 [ 89.501867][ C0] __bpf_get_stack+0x68a/0x710 [ 89.503981][ C0] ? __pfx___bpf_get_stack+0x10/0x10 [ 89.506215][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 89.508432][ C0] bpf_get_stack_raw_tp+0x124/0x160 [ 89.510731][ C0] bpf_prog_ec3b2eefa702d8d3+0x42/0x46 [ 89.513126][ C0] bpf_trace_run2+0x231/0x590 [ 89.515200][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 89.517525][ C0] ? flush_tlb_func+0x3d2/0x600 [ 89.519674][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 89.521978][ C0] trace_tlb_flush+0xf3/0x170 [ 89.524052][ C0] __flush_smp_call_function_queue+0x27a/0x8c0 [ 89.526760][ C0] __sysvec_call_function_single+0x8c/0x410 [ 89.529341][ C0] sysvec_call_function_single+0x90/0xb0 [ 89.531802][ C0] [ 89.533138][ C0] [ 89.534469][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 89.537107][ C0] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 89.539699][ C0] Code: a9 0a 00 00 44 8b 0d c7 de 83 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 59 9a 36 00 fb 65 48 8b 1d 10 a1 a4 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 89.547696][ C0] RSP: 0018:ffffc90006e47550 EFLAGS: 00000206 [ 89.550352][ C0] RAX: 00000000000246b1 RBX: ffff8880206fa440 RCX: 1ffffffff28481ba [ 89.553793][ C0] RDX: 0000000000000000 RSI: ffffffff8b2cb9e0 RDI: ffffffff8b8ff8e0 [ 89.557228][ C0] RBP: ffffc90006e47598 R08: 0000000000000001 R09: fffffbfff283f46e [ 89.560663][ C0] R10: ffffffff941fa377 R11: 0000000000000001 R12: ffff88802c03f938 [ 89.564120][ C0] R13: ffff888020ed8000 R14: 0000000000000000 R15: ffff88802c03ebc0 [ 89.567565][ C0] ? __switch_to+0x749/0x1390 [ 89.569671][ C0] __schedule+0xf1d/0x5d00 [ 89.571635][ C0] ? __pfx_lock_release+0x10/0x10 [ 89.573848][ C0] ? __pfx___schedule+0x10/0x10 [ 89.575991][ C0] ? try_to_wake_up+0x14b/0x13e0 [ 89.578164][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 89.580180][ C0] preempt_schedule_common+0x44/0xc0 [ 89.582244][ C0] preempt_schedule_thunk+0x1a/0x30 [ 89.584284][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 89.586457][ C0] __unix_dgram_recvmsg+0x32a/0xf50 [ 89.588646][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 89.591185][ C0] ? __schedule+0xf1d/0x5d00 [ 89.593227][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 89.595424][ C0] ____sys_recvmsg+0x5fe/0x6b0 [ 89.597523][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 89.599754][ C0] ? kfree+0x245/0x3b0 [ 89.601573][ C0] ___sys_recvmsg+0x115/0x1a0 [ 89.603646][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 89.605939][ C0] ? __pfx___might_resched+0x10/0x10 [ 89.608292][ C0] ? do_recvmmsg+0x4b5/0x750 [ 89.610339][ C0] do_recvmmsg+0x51a/0x750 [ 89.612319][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 89.614485][ C0] ? __pfx_lock_release+0x10/0x10 [ 89.616697][ C0] ? fd_install+0x242/0x750 [ 89.618702][ C0] __sys_recvmmsg+0x21e/0x280 [ 89.620785][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 89.623060][ C0] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 89.625784][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.628059][ C0] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 89.630966][ C0] __do_fast_syscall_32+0x73/0x120 [ 89.633228][ C0] do_fast_syscall_32+0x32/0x80 [ 89.635295][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.637953][ C0] RIP: 0023:0xf73ad579 [ 89.639560][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.647813][ C0] RSP: 002b:00000000f5ca457c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 89.651462][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 89.654914][ C0] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 89.658433][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.661871][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.665270][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.668432][ C0] VM DIAGNOSIS: 21:44:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f9bf15 RDI=ffffffff94d60e40 RBP=ffffffff94d60e00 RSP=ffffc900000074a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e30312e36 R12=0000000000000000 R13=0000000000000031 R14=ffffffff84f9beb0 R15=0000000000000000 RIP=ffffffff84f9bf3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020012000 CR3=0000000059eb6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffc90006eef6c8 RCX=ffffffff8b00176a RDX=0000000000000002 RSI=0000000000000000 RDI=ffffc90006eef6c8 RBP=0000000000000000 RSP=ffffc90006eef670 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8adc5fd5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c100000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000207a9000 CR3=0000000012ca2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802c0462c0 RCX=ffffffff8182644b RDX=ffff88801a57c880 RSI=ffffffff81826425 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000e2ed50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000004 R12=ffffed1005808c59 R13=0000000000000001 R14=ffff88802c0462c8 R15=ffff88802c23fd80 RIP=ffffffff81826427 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5228c7a CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000040000 RBX=ffff88802c046300 RCX=ffffc90003f81000 RDX=0000000000040000 RSI=ffffffff81826425 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90002ad7678 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed1005808c61 R13=0000000000000001 R14=ffff88802c046308 R15=ffff88802c33fd80 RIP=ffffffff81826427 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000030d08ff8 CR3=0000000057494000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000