last executing test programs: 9.408255893s ago: executing program 3 (id=3229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x274, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3fad2c79c647e430c2598342e684eeb571ae38e066467eef"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c96f00bd9053fff6b9fd4d2ebd2e563890181ab52ae164e7"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25b007e2228d499dfa4c9159aa1950f875de419bb77f579f"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "86ee273988305cbc66646d4a4666d53481865aa4bb2c7fb0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf52"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "242450624deacf6473e7f542f0b69724c9555ca262a354a4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0xe, 0xe7, "70699af63f78f086f6041fd6d6c06260fa0283ade3f27e19"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf2"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c1"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0961408e3af2c2b407068443ad12d9e2197a59c472e42d9c"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x274}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000440), &(0x7f0000000480)=0x10) r10 = socket(0x28, 0x5, 0x0) unshare(0x20000400) bind$can_j1939(r10, 0x0, 0x0) getpid() sendmsg$unix(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_a, @random="43e6ba6cd26d", {0x6, 0x8}}, 0x0, 0x19, @default, @val, @void, [{0xdd, 0x70, "93bb225bfc88f1eb33f76135a4a670d5e1878afcf506cb22de4a86c9ba504bbe4941123a7367551f2aebb3fc5228f655b88471c735d3f1e6ff3a9f58fe3b2eaed8bc0cacc3633a949b19bec4d856482e8fc69789810f6bc0f6de5b41445ed63486e53416058c17a000d06a7c029b8881"}]}, 0x92) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 8.637907523s ago: executing program 3 (id=3232): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x44}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) unshare(0x24020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fsync(r2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) r3 = dup(r0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000480)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x82, &(0x7f0000000000)={r6}, &(0x7f0000000200)=0x8) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 8.406062107s ago: executing program 3 (id=3233): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x216, 0x800103a, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}]}, 0x2c, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xfffffe00, 0x9}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) mount$overlay(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x0, &(0x7f0000000f80)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x36, 0x30, 0x33, 0x34, 0x39, 0x52, 0x65], 0x2d, [0x35, 0x38, 0x63], 0x2d, [0x63, 0x64, 0x37], 0x2d, [0x39, 0x66, 0x62, 0x30], 0x2d, [0x31, 0x0, 0x39, 0x62, 0x37, 0x61, 0x37, 0x55]}}}, {@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_gt={'fowner>', r5}}, {@hash}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000680)=':', 0x1}], 0x2, 0x0, 0x158}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) r7 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x8, 0xff, 0xff, 0x4}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0x5, 0x4}]}, 0x1, [{0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "85246824351397a02b9bd45264105e3d82d33356aa1d1a6cc3a21af971249bc8aea6401726cf216170533e5bf73eb27be1f19e9b975b1880e508654c5a9f7bacb55a54f5137fd8391fe399764fbdbe9b2a09cd2e0a5f466a7ff597eb0a690a8bfe9e9ad50c035aca68b85ef88c46ce09585700cb0f4358c7963c32aac28341479f4bc3ba230fc7c3391a40d2a6e6c870c9b0451e97f2d57632eddf214d238a9c98cce00566d1779020c96bcad359f04680e36329e08f79aa2baa3046ae396a721a6ec8c1aa59128b0eac"}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x8d, {0x8d, 0x23, "185886e45d36440848bfd7b2b515bf708a06d2f1db638394ca9e1091c059e2698f608af771243562db683997c8584a4fa5fddcabd41735b74d4ff564f817f7aa95e872cdb75190a3473bb9e7786fe5c7b18a69479c12554e5e3dbffbc55a910ce416745f92e2cf8d81929b42b6cc76ca4fd97aa5a9e810b6c95f7c3ead992996b5e7e7a84898a7a97a5673"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xe, 0xb9, "beb31266d5706235c61479d84bce4f1e61fba816bf722578bc6d01e1e082653150e2503224c116728e3a6f6bccfb6a747e7de57c1ca6bd377d09d7f36b755a31d312c5b33b60753a182d2acaa417b9c6717fb42c951c38669995ffdae12a75f6bbf179561ff1afd2bf3af73ce415315853c634902c45a33f5ad879518c9336e2b486db0cc4ac6f1182924a7443f37503698e3427a984557185355547eb6b6722379cf828aed8ae9edf5338cf35c65877c5886e782c4ec33f22"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x5, 0x6e0, 0xf800, 0x0, 0x80, 0xc45, 0x10, 0xcd, 0x401, 0xfbff}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x5d2}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x9a}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) 7.801482617s ago: executing program 3 (id=3235): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x216, 0x800103a, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}]}, 0x2c, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xfffffe00, 0x9}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) mount$overlay(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x0, &(0x7f0000000f80)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x36, 0x30, 0x33, 0x34, 0x39, 0x52, 0x65], 0x2d, [0x35, 0x38, 0x63], 0x2d, [0x63, 0x64, 0x37], 0x2d, [0x39, 0x66, 0x62, 0x30], 0x2d, [0x31, 0x0, 0x39, 0x62, 0x37, 0x61, 0x37, 0x55]}}}, {@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_gt={'fowner>', r5}}, {@hash}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000680)=':', 0x1}], 0x2, 0x0, 0x158}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) r7 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x5e, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2cd2896fea"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0xfffb, 0x21}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x80, 0x9e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0xdb, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x44, 0xff, 0x7f}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x8, 0xff, 0xff, 0x4}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0x5}]}, 0x1, [{0xc0, &(0x7f0000000400)=@string={0xc0, 0x3, "85246824351397a02b9bd45264105e3d82d33356aa1d1a6cc3a21af971249bc8aea6401726cf216170533e5bf73eb27be1f19e9b975b1880e508654c5a9f7bacb55a54f5137fd8391fe399764fbdbe9b2a09cd2e0a5f466a7ff597eb0a690a8bfe9e9ad50c035aca68b85ef88c46ce09585700cb0f4358c7963c32aac28341479f4bc3ba230fc7c3391a40d2a6e6c870c9b0451e97f2d57632eddf214d238a9c98cce00566d1779020c96bcad359f04680e36329e08f79aa2baa3046ae39"}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x8d, {0x8d, 0x23, "185886e45d36440848bfd7b2b515bf708a06d2f1db638394ca9e1091c059e2698f608af771243562db683997c8584a4fa5fddcabd41735b74d4ff564f817f7aa95e872cdb75190a3473bb9e7786fe5c7b18a69479c12554e5e3dbffbc55a910ce416745f92e2cf8d81929b42b6cc76ca4fd97aa5a9e810b6c95f7c3ead992996b5e7e7a84898a7a97a5673"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xe, 0xb9, "beb31266d5706235c61479d84bce4f1e61fba816bf722578bc6d01e1e082653150e2503224c116728e3a6f6bccfb6a747e7de57c1ca6bd377d09d7f36b755a31d312c5b33b60753a182d2acaa417b9c6717fb42c951c38669995ffdae12a75f6bbf179561ff1afd2bf3af73ce415315853c634902c45a33f5ad879518c9336e2b486db0cc4ac6f1182924a7443f37503698e3427a984557185355547eb6b6722379cf828aed8ae9edf5338cf35c65877c5886e782c4ec33f22"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x5, 0x6e0, 0xf800, 0x0, 0x80, 0xc45, 0x10, 0xcd, 0x401, 0xfbff}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x5d2}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x9a}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000234cc9a10d3312a6478390000000000766c616e00000c"], 0x3c}}, 0x0) 7.70269953s ago: executing program 2 (id=3236): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x216, 0x800103a, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}]}, 0x2c, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xfffffe00, 0x9}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) mount$overlay(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x0, &(0x7f0000000f80)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x36, 0x30, 0x33, 0x34, 0x39, 0x52, 0x65], 0x2d, [0x35, 0x38, 0x63], 0x2d, [0x63, 0x64, 0x37], 0x2d, [0x39, 0x66, 0x62, 0x30], 0x2d, [0x31, 0x0, 0x39, 0x62, 0x37, 0x61, 0x37, 0x55]}}}, {@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_gt={'fowner>', r5}}, {@hash}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000680)=':', 0x1}], 0x2, 0x0, 0x158}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) r7 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x5e, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2cd2896fea"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0xfffb, 0x21}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x80, 0x9e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0xdb, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x44, 0xff, 0x7f}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x8, 0xff, 0xff, 0x4}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0x5}]}, 0x1, [{0xc0, &(0x7f0000000400)=@string={0xc0, 0x3, "85246824351397a02b9bd45264105e3d82d33356aa1d1a6cc3a21af971249bc8aea6401726cf216170533e5bf73eb27be1f19e9b975b1880e508654c5a9f7bacb55a54f5137fd8391fe399764fbdbe9b2a09cd2e0a5f466a7ff597eb0a690a8bfe9e9ad50c035aca68b85ef88c46ce09585700cb0f4358c7963c32aac28341479f4bc3ba230fc7c3391a40d2a6e6c870c9b0451e97f2d57632eddf214d238a9c98cce00566d1779020c96bcad359f04680e36329e08f79aa2baa3046ae39"}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x8d, {0x8d, 0x23, "185886e45d36440848bfd7b2b515bf708a06d2f1db638394ca9e1091c059e2698f608af771243562db683997c8584a4fa5fddcabd41735b74d4ff564f817f7aa95e872cdb75190a3473bb9e7786fe5c7b18a69479c12554e5e3dbffbc55a910ce416745f92e2cf8d81929b42b6cc76ca4fd97aa5a9e810b6c95f7c3ead992996b5e7e7a84898a7a97a5673"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xe, 0xb9, "beb31266d5706235c61479d84bce4f1e61fba816bf722578bc6d01e1e082653150e2503224c116728e3a6f6bccfb6a747e7de57c1ca6bd377d09d7f36b755a31d312c5b33b60753a182d2acaa417b9c6717fb42c951c38669995ffdae12a75f6bbf179561ff1afd2bf3af73ce415315853c634902c45a33f5ad879518c9336e2b486db0cc4ac6f1182924a7443f37503698e3427a984557185355547eb6b6722379cf828aed8ae9edf5338cf35c65877c5886e782c4ec33f22"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x5, 0x6e0, 0xf800, 0x0, 0x80, 0xc45, 0x10, 0xcd, 0x401, 0xfbff}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x5d2}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x9a}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000234cc9a10d3312a6478390000000000766c616e00000c"], 0x3c}}, 0x0) 6.52878966s ago: executing program 0 (id=3240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x274, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3fad2c79c647e430c2598342e684eeb571ae38e066467eef"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c96f00bd9053fff6b9fd4d2ebd2e563890181ab52ae164e7"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25b007e2228d499dfa4c9159aa1950f875de419bb77f579f"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "86ee273988305cbc66646d4a4666d53481865aa4bb2c7fb0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf52"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "242450624deacf6473e7f542f0b69724c9555ca262a354a4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0xe, 0xe7, "70699af63f78f086f6041fd6d6c06260fa0283ade3f27e19"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf2"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c1"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0961408e3af2c2b407068443ad12d9e2197a59c472e42d9c"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x274}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000440), &(0x7f0000000480)=0x10) r10 = socket(0x28, 0x5, 0x0) unshare(0x20000400) bind$can_j1939(r10, 0x0, 0x0) getpid() sendmsg$unix(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_a, @random="43e6ba6cd26d", {0x6, 0x8}}, 0x0, 0x19, @default, @val, @void, [{0xdd, 0x70, "93bb225bfc88f1eb33f76135a4a670d5e1878afcf506cb22de4a86c9ba504bbe4941123a7367551f2aebb3fc5228f655b88471c735d3f1e6ff3a9f58fe3b2eaed8bc0cacc3633a949b19bec4d856482e8fc69789810f6bc0f6de5b41445ed63486e53416058c17a000d06a7c029b8881"}]}, 0x92) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 5.846863721s ago: executing program 0 (id=3241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x7b73, 0x80, 0x2}, &(0x7f0000000240), &(0x7f0000000040)) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) mlockall(0x1) 4.714554639s ago: executing program 3 (id=3243): socket$tipc(0x1e, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x242b, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) 3.867664767s ago: executing program 2 (id=3244): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x216, 0x800103a, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}]}, 0x2c, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xfffffe00, 0x9}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) mount$overlay(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x0, &(0x7f0000000f80)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x36, 0x30, 0x33, 0x34, 0x39, 0x52, 0x65], 0x2d, [0x35, 0x38, 0x63], 0x2d, [0x63, 0x64, 0x37], 0x2d, [0x39, 0x66, 0x62, 0x30], 0x2d, [0x31, 0x0, 0x39, 0x62, 0x37, 0x61, 0x37, 0x55]}}}, {@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_gt={'fowner>', r5}}, {@hash}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000680)=':', 0x1}], 0x2, 0x0, 0x158}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) r7 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x8, 0xff, 0xff, 0x4}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0x5, 0x4}]}, 0x1, [{0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "85246824351397a02b9bd45264105e3d82d33356aa1d1a6cc3a21af971249bc8aea6401726cf216170533e5bf73eb27be1f19e9b975b1880e508654c5a9f7bacb55a54f5137fd8391fe399764fbdbe9b2a09cd2e0a5f466a7ff597eb0a690a8bfe9e9ad50c035aca68b85ef88c46ce09585700cb0f4358c7963c32aac28341479f4bc3ba230fc7c3391a40d2a6e6c870c9b0451e97f2d57632eddf214d238a9c98cce00566d1779020c96bcad359f04680e36329e08f79aa2baa3046ae396a721a6ec8c1aa59128b0eac"}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x8d, {0x8d, 0x23, "185886e45d36440848bfd7b2b515bf708a06d2f1db638394ca9e1091c059e2698f608af771243562db683997c8584a4fa5fddcabd41735b74d4ff564f817f7aa95e872cdb75190a3473bb9e7786fe5c7b18a69479c12554e5e3dbffbc55a910ce416745f92e2cf8d81929b42b6cc76ca4fd97aa5a9e810b6c95f7c3ead992996b5e7e7a84898a7a97a5673"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xe, 0xb9, "beb31266d5706235c61479d84bce4f1e61fba816bf722578bc6d01e1e082653150e2503224c116728e3a6f6bccfb6a747e7de57c1ca6bd377d09d7f36b755a31d312c5b33b60753a182d2acaa417b9c6717fb42c951c38669995ffdae12a75f6bbf179561ff1afd2bf3af73ce415315853c634902c45a33f5ad879518c9336e2b486db0cc4ac6f1182924a7443f37503698e3427a984557185355547eb6b6722379cf828aed8ae9edf5338cf35c65877c5886e782c4ec33f22"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x5, 0x6e0, 0xf800, 0x0, 0x80, 0xc45, 0x10, 0xcd, 0x401, 0xfbff}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x5d2}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x9a}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) 3.847232254s ago: executing program 0 (id=3245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000d9ffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_setup(0x64ff, &(0x7f0000000540)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 3.696458922s ago: executing program 0 (id=3247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x274, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3fad2c79c647e430c2598342e684eeb571ae38e066467eef"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c96f00bd9053fff6b9fd4d2ebd2e563890181ab52ae164e7"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25b007e2228d499dfa4c9159aa1950f875de419bb77f579f"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "86ee273988305cbc66646d4a4666d53481865aa4bb2c7fb0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf52"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "242450624deacf6473e7f542f0b69724c9555ca262a354a4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0xe, 0xe7, "70699af63f78f086f6041fd6d6c06260fa0283ade3f27e19"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf2"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c1"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0961408e3af2c2b407068443ad12d9e2197a59c472e42d9c"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x274}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000440), &(0x7f0000000480)=0x10) r10 = socket(0x28, 0x5, 0x0) unshare(0x20000400) bind$can_j1939(r10, 0x0, 0x0) getpid() sendmsg$unix(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_a, @random="43e6ba6cd26d", {0x6, 0x8}}, 0x0, 0x19, @default, @val, @void, [{0xdd, 0x7f, "93bb225bfc88f1eb33f76135a4a670d5e1878afcf506cb22de4a86c9ba504bbe4941123a7367551f2aebb3fc5228f655b88471c735d3f1e6ff3a9f58fe3b2eaed8bc0cacc3633a949b19bec4d856482e8fc69789810f6bc0f6de5b41445ed63486e53416058c17a000d06a7c029b8881f66c1200d0abddf62ba7019db8eb6f"}]}, 0xa1) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 3.469456224s ago: executing program 1 (id=3248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000d9ffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_setup(0x64ff, &(0x7f0000000540)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 3.345666194s ago: executing program 1 (id=3249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x274, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3fad2c79c647e430c2598342e684eeb571ae38e066467eef"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c96f00bd9053fff6b9fd4d2ebd2e563890181ab52ae164e7"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25b007e2228d499dfa4c9159aa1950f875de419bb77f579f"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "86ee273988305cbc66646d4a4666d53481865aa4bb2c7fb0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf52"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "242450624deacf6473e7f542f0b69724c9555ca262a354a4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0xe, 0xe7, "70699af63f78f086f6041fd6d6c06260fa0283ade3f27e19"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf2"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c1"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0961408e3af2c2b407068443ad12d9e2197a59c472e42d9c"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x274}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000440), &(0x7f0000000480)=0x10) r10 = socket(0x28, 0x5, 0x0) unshare(0x20000400) bind$can_j1939(r10, 0x0, 0x0) getpid() sendmsg$unix(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_a, @random="43e6ba6cd26d", {0x6, 0x8}}, 0x0, 0x19, @default, @val, @void, [{0xdd, 0x70, "93bb225bfc88f1eb33f76135a4a670d5e1878afcf506cb22de4a86c9ba504bbe4941123a7367551f2aebb3fc5228f655b88471c735d3f1e6ff3a9f58fe3b2eaed8bc0cacc3633a949b19bec4d856482e8fc69789810f6bc0f6de5b41445ed63486e53416058c17a000d06a7c029b8881"}]}, 0x92) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 3.216100359s ago: executing program 2 (id=3250): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) unshare(0x68040200) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001600190f00003fffffffda060200000000e80003dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r2 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x2000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c11"], 0x14) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c80051ee3ccd5e284f0a98a290ea0f60476dcef30dba637d51b6e11bbac658d0d18c9bc63ec6307d7938406546ffb7e3489c37ed856faa10454366ff9fe0ea477dc270e98a7faf2669c29dea5c5febb895"], 0x55) r3 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x1000) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x8, @win={{0x0, 0x1, 0x4, 0x20}, 0x0, 0x0, &(0x7f00000003c0)={{0x5, 0x40, 0x2, 0x3}, &(0x7f0000000380)={{0x5, 0x0, 0x6, 0x5}, &(0x7f0000000340)={{0xdb25, 0x80000001, 0x5, 0x8}}}}, 0x0, &(0x7f0000000400)="de6860463ea78103f1dbbd3492339e15f87ba51e080ad377c7bfe803806f40c7b561daf1ba1226191d38018ae4b257c6df771911", 0x1}}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @dev}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYBLOB], 0x28}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r9 = dup3(r8, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000a80)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x600, &(0x7f0000000a00)="05"}) 3.063232612s ago: executing program 0 (id=3251): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x216, 0x800103a, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}]}, 0x2c, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xfffffe00, 0x9}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) mount$overlay(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x0, &(0x7f0000000f80)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x36, 0x30, 0x33, 0x34, 0x39, 0x52, 0x65], 0x2d, [0x35, 0x38, 0x63], 0x2d, [0x63, 0x64, 0x37], 0x2d, [0x39, 0x66, 0x62, 0x30], 0x2d, [0x31, 0x0, 0x39, 0x62, 0x37, 0x61, 0x37, 0x55]}}}, {@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_gt={'fowner>', r5}}, {@hash}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000680)=':', 0x1}], 0x2, 0x0, 0x158}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) r7 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x5e, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2cd2896fea"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0xfffb, 0x21}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x80, 0x9e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0xdb, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x44, 0xff, 0x7f}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x8, 0xff, 0xff, 0x4}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0x5}]}, 0x1, [{0xc0, &(0x7f0000000400)=@string={0xc0, 0x3, "85246824351397a02b9bd45264105e3d82d33356aa1d1a6cc3a21af971249bc8aea6401726cf216170533e5bf73eb27be1f19e9b975b1880e508654c5a9f7bacb55a54f5137fd8391fe399764fbdbe9b2a09cd2e0a5f466a7ff597eb0a690a8bfe9e9ad50c035aca68b85ef88c46ce09585700cb0f4358c7963c32aac28341479f4bc3ba230fc7c3391a40d2a6e6c870c9b0451e97f2d57632eddf214d238a9c98cce00566d1779020c96bcad359f04680e36329e08f79aa2baa3046ae39"}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x8d, {0x8d, 0x23, "185886e45d36440848bfd7b2b515bf708a06d2f1db638394ca9e1091c059e2698f608af771243562db683997c8584a4fa5fddcabd41735b74d4ff564f817f7aa95e872cdb75190a3473bb9e7786fe5c7b18a69479c12554e5e3dbffbc55a910ce416745f92e2cf8d81929b42b6cc76ca4fd97aa5a9e810b6c95f7c3ead992996b5e7e7a84898a7a97a5673"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xe, 0xb9, "beb31266d5706235c61479d84bce4f1e61fba816bf722578bc6d01e1e082653150e2503224c116728e3a6f6bccfb6a747e7de57c1ca6bd377d09d7f36b755a31d312c5b33b60753a182d2acaa417b9c6717fb42c951c38669995ffdae12a75f6bbf179561ff1afd2bf3af73ce415315853c634902c45a33f5ad879518c9336e2b486db0cc4ac6f1182924a7443f37503698e3427a984557185355547eb6b6722379cf828aed8ae9edf5338cf35c65877c5886e782c4ec33f22"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x5, 0x6e0, 0xf800, 0x0, 0x80, 0xc45, 0x10, 0xcd, 0x401, 0xfbff}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x5d2}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x9a}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000234cc9a10d3312a6478390000000000766c616e00000c"], 0x3c}}, 0x0) 3.040465809s ago: executing program 2 (id=3252): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newae={0x40, 0x1e, 0x1, 0x0, 0x0, {{@in=@private=0xa010102}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}}, 0x40}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r6 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x3, r7, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000240)={r12}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000000000001df6be0a5797bd9a979a9683d41000000180017000000000000004369704c"], 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) 2.972544102s ago: executing program 3 (id=3253): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x216, 0x800103a, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}]}, 0x2c, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0xfffffe00, 0x9}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) mount$overlay(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x0, &(0x7f0000000f80)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x36, 0x30, 0x33, 0x34, 0x39, 0x52, 0x65], 0x2d, [0x35, 0x38, 0x63], 0x2d, [0x63, 0x64, 0x37], 0x2d, [0x39, 0x66, 0x62, 0x30], 0x2d, [0x31, 0x0, 0x39, 0x62, 0x37, 0x61, 0x37, 0x55]}}}, {@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_gt={'fowner>', r5}}, {@hash}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000680)=':', 0x1}], 0x2, 0x0, 0x158}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x210) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) r7 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x5e, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2cd2896fea"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0xfffb, 0x21}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x80, 0x9e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0xdb, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x44, 0xff, 0x7f}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x1, 0x8, 0xff, 0xff, 0x4}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0x5}]}, 0x1, [{0xc0, &(0x7f0000000400)=@string={0xc0, 0x3, "85246824351397a02b9bd45264105e3d82d33356aa1d1a6cc3a21af971249bc8aea6401726cf216170533e5bf73eb27be1f19e9b975b1880e508654c5a9f7bacb55a54f5137fd8391fe399764fbdbe9b2a09cd2e0a5f466a7ff597eb0a690a8bfe9e9ad50c035aca68b85ef88c46ce09585700cb0f4358c7963c32aac28341479f4bc3ba230fc7c3391a40d2a6e6c870c9b0451e97f2d57632eddf214d238a9c98cce00566d1779020c96bcad359f04680e36329e08f79aa2baa3046ae39"}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x8d, {0x8d, 0x23, "185886e45d36440848bfd7b2b515bf708a06d2f1db638394ca9e1091c059e2698f608af771243562db683997c8584a4fa5fddcabd41735b74d4ff564f817f7aa95e872cdb75190a3473bb9e7786fe5c7b18a69479c12554e5e3dbffbc55a910ce416745f92e2cf8d81929b42b6cc76ca4fd97aa5a9e810b6c95f7c3ead992996b5e7e7a84898a7a97a5673"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xe, 0xb9, "beb31266d5706235c61479d84bce4f1e61fba816bf722578bc6d01e1e082653150e2503224c116728e3a6f6bccfb6a747e7de57c1ca6bd377d09d7f36b755a31d312c5b33b60753a182d2acaa417b9c6717fb42c951c38669995ffdae12a75f6bbf179561ff1afd2bf3af73ce415315853c634902c45a33f5ad879518c9336e2b486db0cc4ac6f1182924a7443f37503698e3427a984557185355547eb6b6722379cf828aed8ae9edf5338cf35c65877c5886e782c4ec33f22"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x9, 0x0, 0x5, 0x6e0, 0xf800, 0x0, 0x80, 0xc45, 0x10, 0xcd, 0x401, 0xfbff}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x5d2}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x9a}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000234cc9a10d3312a6478390000000000766c616e00000c"], 0x3c}}, 0x0) 2.689568498s ago: executing program 1 (id=3254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x7b73, 0x80, 0x2}, &(0x7f0000000240), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) mlockall(0x1) 2.086221777s ago: executing program 2 (id=3255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x7b73, 0x80, 0x2}, &(0x7f0000000240), &(0x7f0000000040)) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) mlockall(0x1) 1.342567309s ago: executing program 1 (id=3256): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c002e04feade5c70000000800000000000000000000000000000600"], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a80)=ANY=[@ANYBLOB="02c83020001c0001000b0204004c00000002080400030003080303080000000200d3"], 0x25) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'pim6reg1\x00', 0x5}) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r2, 0x8bb2, &(0x7f0000000180)="b43bb313d41378caf356c0f81ce99f8f4a4d95699d65b06cee921421f57ad9d2580ded6be9e8eeb688ccc85fb907e24782b8174d60c1a6801d43107c92bf861af6fc2365c5d2125d77feab2c93d6248587efb28af427622434f7b8d75b84a5d4e8354761b177e4185ff33c9787c99dc4d85074c0f76247b20535a9307e7c434f51e8d309") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x2f}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8}], @NL80211_ATTR_SSID={0x5, 0x34, @random="7f"}]}, 0x2c}}, 0x0) 948.851199ms ago: executing program 1 (id=3257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000d9ffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_setup(0x64ff, &(0x7f0000000540)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 723.813801ms ago: executing program 1 (id=3258): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r6 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r8, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x0, r7, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000240)={r12}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000000000001df6be0a5797bd9a979a9683d41000000180017000000000000004369704c"], 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) 678.797759ms ago: executing program 2 (id=3259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x7b73, 0x80, 0x2}, &(0x7f0000000240), &(0x7f0000000040)) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) mlockall(0x1) 0s ago: executing program 0 (id=3260): socket$tipc(0x1e, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x242b, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) kernel console output (not intermixed with test programs): 507.086581][ T1356] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.089213][ T1356] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.097319][ T9140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 507.102039][ T9140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 507.106665][ T9140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.112155][ T9140] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.116605][ T9140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.122514][ T9140] usb 5-1: config 0 descriptor?? [ 507.184374][ T4171] usb 8-1: device descriptor read/64, error -71 [ 507.247049][T15289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.271771][ T5205] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 507.454318][ T4171] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 507.533180][ T9140] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x1 [ 507.536318][T15300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2741'. [ 507.538911][ T9140] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 507.549057][ T9140] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 507.604452][ T4171] usb 8-1: device descriptor read/64, error -71 [ 507.728153][ T4171] usb usb8-port1: attempt power cycle [ 507.742238][ T9140] usb 5-1: USB disconnect, device number 70 [ 508.154448][ T4171] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 508.195665][ T4171] usb 8-1: device descriptor read/8, error -71 [ 508.484413][ T4171] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 508.520163][ T4171] usb 8-1: device descriptor read/8, error -71 [ 508.600190][ T5205] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 508.644554][ T4171] usb usb8-port1: unable to enumerate USB device [ 508.774021][T15312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2744'. [ 509.688681][T15321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.731936][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2746'. [ 509.749172][T15321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.794512][ T5205] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 510.070212][T15328] bond0: entered promiscuous mode [ 510.072786][T15328] bond_slave_0: entered promiscuous mode [ 510.076296][T15328] bond_slave_1: entered promiscuous mode [ 510.133133][T15327] bond0: left promiscuous mode [ 510.135148][T15327] bond_slave_0: left promiscuous mode [ 510.137417][T15327] bond_slave_1: left promiscuous mode [ 510.184223][ T39] audit: type=1326 audit(1719705929.707:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15332 comm="syz.3.2751" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34e4d75b99 code=0x0 [ 510.265347][T15321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.400845][T15338] Invalid ELF section header overflow [ 510.424319][ T5239] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 510.549549][ T5205] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 510.616949][ T5239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 510.621943][ T5239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 510.626423][ T5239] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.632116][ T5239] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.636225][ T5239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.642013][ T5239] usb 7-1: config 0 descriptor?? [ 511.064065][ T5239] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x1 [ 511.068885][ T5239] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 511.081062][ T5239] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 511.260399][ T5239] usb 7-1: USB disconnect, device number 64 [ 512.109242][ T5205] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 512.174572][ T5099] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 512.295127][T15359] overlay: Bad value for 'redirect_dir' [ 512.344271][ T5099] usb 7-1: device descriptor read/64, error -71 [ 512.614409][ T5099] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 512.634408][ T8] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 512.764360][ T5099] usb 7-1: device descriptor read/64, error -71 [ 512.816185][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 512.819569][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 512.826061][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.829322][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.832927][ T8] usb 5-1: Product: syz [ 512.834270][ T5205] Bluetooth: hci2: command 0x0406 tx timeout [ 512.835136][ T8] usb 5-1: Manufacturer: syz [ 512.841040][ T8] usb 5-1: SerialNumber: syz [ 512.884750][ T5099] usb usb7-port1: attempt power cycle [ 513.304970][ T5099] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 513.330398][ T8] cdc_ncm 5-1:1.0: bind() failure [ 513.335438][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 513.338483][ T8] cdc_ncm 5-1:1.1: bind() failure [ 513.346799][ T5099] usb 7-1: device descriptor read/8, error -71 [ 513.350535][ T8] usb 5-1: USB disconnect, device number 71 [ 513.624308][ T5099] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 513.665208][ T5099] usb 7-1: device descriptor read/8, error -71 [ 513.682392][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2761'. [ 513.784474][ T5099] usb usb7-port1: unable to enumerate USB device [ 513.928136][T15366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.959817][T15373] overlay: Bad value for 'redirect_dir' [ 514.035358][ T5205] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 514.304274][ T5099] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 514.392801][T15386] bond0: entered promiscuous mode [ 514.395345][T15386] bond_slave_0: entered promiscuous mode [ 514.398065][T15386] bond_slave_1: entered promiscuous mode [ 514.424576][ T39] audit: type=1326 audit(1719705933.957:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.3.2765" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34e4d75b99 code=0x0 [ 514.494269][ T5099] usb 6-1: Using ep0 maxpacket: 8 [ 514.497458][ T5099] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 514.504069][ T5099] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.508192][ T5099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.511630][ T5099] usb 6-1: Product: syz [ 514.513572][ T5099] usb 6-1: Manufacturer: syz [ 514.515856][ T5099] usb 6-1: SerialNumber: syz [ 514.519147][ T30] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 514.707588][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 514.712891][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 514.717877][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.723591][ T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.730419][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.738991][ T30] usb 5-1: config 0 descriptor?? [ 514.936441][ T5099] cdc_ncm 6-1:1.0: bind() failure [ 514.936554][ T5205] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 514.942522][ T5099] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 514.949981][ T5099] cdc_ncm 6-1:1.1: bind() failure [ 514.963958][ T5099] usb 6-1: USB disconnect, device number 76 [ 515.158471][ T30] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x1 [ 515.162708][ T30] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving [ 515.170845][ T30] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 515.222097][T15385] bond0: left promiscuous mode [ 515.225176][T15385] bond_slave_0: left promiscuous mode [ 515.227757][T15385] bond_slave_1: left promiscuous mode [ 515.359895][ T5239] usb 5-1: USB disconnect, device number 72 [ 516.542446][T15436] bond0: entered promiscuous mode [ 516.545076][T15436] bond_slave_0: entered promiscuous mode [ 516.547662][T15436] bond_slave_1: entered promiscuous mode [ 517.380927][T15435] bond0: left promiscuous mode [ 517.383294][T15435] bond_slave_0: left promiscuous mode [ 517.386930][T15435] bond_slave_1: left promiscuous mode [ 517.555346][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 517.565943][ T5205] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 517.635002][ T5205] Bluetooth: hci1: command 0x0406 tx timeout [ 517.714298][ T8] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 517.724422][ T5205] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 517.864260][ T8] usb 7-1: device descriptor read/64, error -71 [ 517.868084][T15480] bond0: entered promiscuous mode [ 517.870361][T15480] bond_slave_0: entered promiscuous mode [ 517.872933][T15480] bond_slave_1: entered promiscuous mode [ 518.134786][ T8] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 518.294314][ T8] usb 7-1: device descriptor read/64, error -71 [ 518.415291][ T8] usb usb7-port1: attempt power cycle [ 518.698664][T15479] bond0: left promiscuous mode [ 518.701040][T15479] bond_slave_0: left promiscuous mode [ 518.703713][T15479] bond_slave_1: left promiscuous mode [ 518.834578][ T8] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 518.864888][ T8] usb 7-1: device descriptor read/8, error -71 [ 519.144299][ T8] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 519.175229][ T8] usb 7-1: device descriptor read/8, error -71 [ 519.294868][ T8] usb usb7-port1: unable to enumerate USB device [ 519.506232][ T5205] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 519.510112][ T5205] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 519.794719][ T30] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 519.996710][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 520.002130][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 520.007467][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.014752][ T30] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.019027][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.043674][ T30] usb 8-1: config 0 descriptor?? [ 520.466005][ T30] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x1 [ 520.470472][ T30] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 520.485211][ T30] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 520.661738][ T1948] usb 8-1: USB disconnect, device number 68 [ 520.825025][T15530] overlay: Bad value for 'redirect_dir' [ 521.018159][ T5205] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 521.184290][ T8] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 521.214032][ T5205] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 521.374258][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 521.379101][ T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 521.385759][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2785'. [ 521.393584][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.397729][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.401798][ T8] usb 6-1: Product: syz [ 521.404496][ T8] usb 6-1: Manufacturer: syz [ 521.406974][ T8] usb 6-1: SerialNumber: syz [ 521.528189][ T5205] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 521.554778][ T5205] Bluetooth: hci1: command 0x0406 tx timeout [ 521.564335][ T5205] Bluetooth: hci2: command 0x0406 tx timeout [ 521.575899][T15546] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 521.809406][T15549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.855783][ T8] cdc_ncm 6-1:1.0: bind() failure [ 521.859967][ T8] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 521.863186][ T8] cdc_ncm 6-1:1.1: bind() failure [ 521.867616][ T8] usb 6-1: USB disconnect, device number 77 [ 521.872230][T15549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.093468][T15554] bond0: entered promiscuous mode [ 522.095875][T15554] bond_slave_0: entered promiscuous mode [ 522.098200][T15554] bond_slave_1: entered promiscuous mode [ 522.416033][T15549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.559177][T15564] overlay: Bad value for 'redirect_dir' [ 522.689731][ T5205] Bluetooth: hci4: command 0x0406 tx timeout [ 522.926020][ T1948] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 523.098067][T15553] bond0: left promiscuous mode [ 523.100789][T15553] bond_slave_0: left promiscuous mode [ 523.104526][T15553] bond_slave_1: left promiscuous mode [ 523.114347][ T1948] usb 6-1: Using ep0 maxpacket: 8 [ 523.120299][ T1948] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 523.140034][ T1948] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.145898][ T1948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.149191][ T1948] usb 6-1: Product: syz [ 523.150995][ T1948] usb 6-1: Manufacturer: syz [ 523.153418][ T1948] usb 6-1: SerialNumber: syz [ 523.602305][ T5205] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 523.624766][ T1948] cdc_ncm 6-1:1.0: bind() failure [ 523.630418][ T1948] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 523.643809][ T1948] cdc_ncm 6-1:1.1: bind() failure [ 523.645349][T15564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2790'. [ 523.657444][ T1948] usb 6-1: USB disconnect, device number 78 [ 523.665617][ T56] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 523.863034][ T5205] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 523.890893][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 523.895520][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 523.899669][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 523.912740][ T56] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 523.920797][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.923022][ T5205] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 523.934551][ T56] usb 7-1: config 0 descriptor?? [ 523.968364][T15601] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 524.101204][T15606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2796'. [ 524.347696][ T56] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x1 [ 524.352307][T15614] overlay: Bad value for 'redirect_dir' [ 524.353262][ T56] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 524.365762][ T56] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 524.394845][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2797'. [ 524.548745][ T56] usb 7-1: USB disconnect, device number 73 [ 524.694539][ T8] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 524.884374][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 524.892350][ T8] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 524.902978][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.906275][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.910121][ T8] usb 8-1: Product: syz [ 524.911909][ T8] usb 8-1: Manufacturer: syz [ 524.913930][ T8] usb 8-1: SerialNumber: syz [ 525.107802][T15620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.171225][T15624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.175631][T15622] overlay: Bad value for 'redirect_dir' [ 525.194398][T15620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.368760][ T8] cdc_ncm 8-1:1.0: bind() failure [ 525.374009][ T8] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 525.376881][ T8] cdc_ncm 8-1:1.1: bind() failure [ 525.382095][ T8] usb 8-1: USB disconnect, device number 69 [ 525.514323][ T1948] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 525.694316][ T1948] usb 6-1: Using ep0 maxpacket: 8 [ 525.699614][ T1948] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 525.707847][ T1948] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.712063][ T1948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.716137][ T1948] usb 6-1: Product: syz [ 525.717978][ T1948] usb 6-1: Manufacturer: syz [ 525.720057][ T1948] usb 6-1: SerialNumber: syz [ 525.856663][ T5205] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 525.923326][ T5205] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 525.972708][T15637] overlay: Bad value for 'redirect_dir' [ 526.120034][ T5205] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 526.149139][ T1948] cdc_ncm 6-1:1.0: bind() failure [ 526.159524][ T1948] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 526.162128][T15622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2801'. [ 526.162689][ T1948] cdc_ncm 6-1:1.1: bind() failure [ 526.164112][T15643] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 526.179037][ T1948] usb 6-1: USB disconnect, device number 79 [ 526.304275][ T9140] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 526.364318][ T5205] Bluetooth: hci2: command 0x0406 tx timeout [ 526.375630][T15646] overlay: Bad value for 'redirect_dir' [ 526.504410][ T9140] usb 7-1: Using ep0 maxpacket: 8 [ 526.509478][ T9140] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 526.517349][ T9140] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.521574][ T9140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.525298][ T9140] usb 7-1: Product: syz [ 526.527151][ T9140] usb 7-1: Manufacturer: syz [ 526.529218][ T9140] usb 7-1: SerialNumber: syz [ 526.706029][ T56] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 526.884493][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 526.888546][ T56] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 526.896633][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.900539][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.903857][ T56] usb 8-1: Product: syz [ 526.905805][ T56] usb 8-1: Manufacturer: syz [ 526.907799][ T56] usb 8-1: SerialNumber: syz [ 526.956583][ T9140] cdc_ncm 7-1:1.0: bind() failure [ 526.962307][ T9140] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 526.964105][T15637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2805'. [ 526.969594][ T9140] cdc_ncm 7-1:1.1: bind() failure [ 526.975669][ T9140] usb 7-1: USB disconnect, device number 74 [ 527.054327][ T25] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 527.236666][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 527.241605][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 527.246611][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.252424][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.256744][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.263883][ T25] usb 6-1: config 0 descriptor?? [ 527.330625][ T56] cdc_ncm 8-1:1.0: bind() failure [ 527.340944][ T56] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 527.344037][ T56] cdc_ncm 8-1:1.1: bind() failure [ 527.355237][ T56] usb 8-1: USB disconnect, device number 70 [ 527.676033][ T25] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x1 [ 527.679838][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 527.685151][ T25] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 527.692890][ T25] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 527.874378][ T5205] Bluetooth: hci4: command 0x0406 tx timeout [ 527.879222][ T9140] usb 6-1: USB disconnect, device number 80 [ 529.604414][T15662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.604692][ T5205] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 529.609976][T15665] overlay: Bad value for 'redirect_dir' [ 529.621432][T15666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.665863][T15662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.675482][T15662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.688691][T15672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.751959][ T5205] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 529.788738][T15675] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 529.954351][ T8] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 530.144402][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 530.157342][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 530.169761][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.174497][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.178740][ T8] usb 5-1: Product: syz [ 530.181075][ T8] usb 5-1: Manufacturer: syz [ 530.183341][ T8] usb 5-1: SerialNumber: syz [ 530.206929][T15666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.271470][T15682] overlay: Bad value for 'redirect_dir' [ 530.631015][ T8] cdc_ncm 5-1:1.0: bind() failure [ 530.643993][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 530.648304][ T8] cdc_ncm 5-1:1.1: bind() failure [ 530.654237][ T1948] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 530.664506][ T8] usb 5-1: USB disconnect, device number 73 [ 530.834413][ T1948] usb 6-1: Using ep0 maxpacket: 8 [ 530.844845][ T1948] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 530.855001][ T1948] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.859607][ T1948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.864051][ T1948] usb 6-1: Product: syz [ 530.867395][ T1948] usb 6-1: Manufacturer: syz [ 530.869956][ T1948] usb 6-1: SerialNumber: syz [ 531.328775][ T1948] cdc_ncm 6-1:1.0: bind() failure [ 531.346065][T15682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2817'. [ 531.346479][ T1948] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 531.355653][ T1948] cdc_ncm 6-1:1.1: bind() failure [ 531.366309][ T1948] usb 6-1: USB disconnect, device number 81 [ 531.475843][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 531.893630][T15701] bond0: entered promiscuous mode [ 531.896425][T15701] bond_slave_0: entered promiscuous mode [ 531.898912][T15701] bond_slave_1: entered promiscuous mode [ 532.089192][T15704] overlay: Bad value for 'redirect_dir' [ 532.149325][ T5205] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 532.176625][T15710] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 532.194738][ T5205] Bluetooth: hci0: command 0x0406 tx timeout [ 532.434252][ T25] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 532.614351][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 532.620832][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 532.632105][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.636680][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.641185][ T25] usb 5-1: Product: syz [ 532.643388][ T25] usb 5-1: Manufacturer: syz [ 532.645614][ T25] usb 5-1: SerialNumber: syz [ 532.728718][T15700] bond0: left promiscuous mode [ 532.731907][T15700] bond_slave_0: left promiscuous mode [ 532.734967][T15700] bond_slave_1: left promiscuous mode [ 532.826869][T15729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.891567][T15729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.917251][T15729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.090986][ T25] cdc_ncm 5-1:1.0: bind() failure [ 533.097316][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 533.100022][ T25] cdc_ncm 5-1:1.1: bind() failure [ 533.102348][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2823'. [ 533.114063][ T25] usb 5-1: USB disconnect, device number 74 [ 533.926351][T15746] overlay: Bad value for 'redirect_dir' [ 534.294413][ T1948] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 534.485245][ T1948] usb 8-1: Using ep0 maxpacket: 8 [ 534.513940][ T1948] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 534.530276][ T1948] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.534080][ T1948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.537801][ T1948] usb 8-1: Product: syz [ 534.539749][ T1948] usb 8-1: Manufacturer: syz [ 534.541918][ T1948] usb 8-1: SerialNumber: syz [ 534.602390][ T5205] Bluetooth: hci0: command 0x0406 tx timeout [ 535.029661][ T1948] cdc_ncm 8-1:1.0: bind() failure [ 535.037399][ T1948] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 535.039520][ T1948] cdc_ncm 8-1:1.1: bind() failure [ 535.043300][ T1948] usb 8-1: USB disconnect, device number 71 [ 535.098905][ T5205] Bluetooth: hci4: link tx timeout [ 535.101222][ T5205] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 535.254743][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'. [ 535.308119][T15763] bridge_slave_1: left allmulticast mode [ 535.310790][T15763] bridge_slave_1: left promiscuous mode [ 535.313648][T15763] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.321277][T15763] bridge_slave_0: left allmulticast mode [ 535.323741][T15763] bridge_slave_0: left promiscuous mode [ 535.327051][T15763] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.380093][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 535.422728][T15767] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 535.607208][T15770] overlay: Bad value for 'redirect_dir' [ 535.762916][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 535.767331][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 535.973155][ T25] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 536.004266][T15781] overlay: Bad value for 'redirect_dir' [ 536.184556][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 536.195939][ T25] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 536.206297][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.210275][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.213873][ T25] usb 8-1: Product: syz [ 536.229548][ T25] usb 8-1: Manufacturer: syz [ 536.232465][ T25] usb 8-1: SerialNumber: syz [ 536.364306][ T5099] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 536.554231][ T5099] usb 6-1: Using ep0 maxpacket: 8 [ 536.558892][ T5099] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 536.566506][ T5099] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.570885][ T5099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.577998][ T5099] usb 6-1: Product: syz [ 536.579834][ T5099] usb 6-1: Manufacturer: syz [ 536.581600][ T5099] usb 6-1: SerialNumber: syz [ 536.678074][ T25] cdc_ncm 8-1:1.0: bind() failure [ 536.723476][ T25] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 536.726922][ T25] cdc_ncm 8-1:1.1: bind() failure [ 536.749069][ T25] usb 8-1: USB disconnect, device number 72 [ 537.038905][ T5099] cdc_ncm 6-1:1.0: bind() failure [ 537.058659][ T5099] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 537.061977][T15781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2837'. [ 537.062075][ T5099] cdc_ncm 6-1:1.1: bind() failure [ 537.080461][ T5099] usb 6-1: USB disconnect, device number 82 [ 537.164485][ T5205] Bluetooth: hci4: command 0x0406 tx timeout [ 537.233778][T15789] overlay: Bad value for 'redirect_dir' [ 537.389319][ T5205] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 537.429525][ T5205] Bluetooth: unknown link type 32 [ 537.432055][ T5205] Bluetooth: hci4: connection err: -111 [ 537.574255][ T25] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 537.724730][T15805] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 537.764238][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 537.771615][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 537.788461][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.792482][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.804356][ T5205] Bluetooth: hci2: command 0x0406 tx timeout [ 537.804643][ T25] usb 5-1: Product: syz [ 537.808976][ T25] usb 5-1: Manufacturer: syz [ 537.811025][ T25] usb 5-1: SerialNumber: syz [ 538.295166][ T25] cdc_ncm 5-1:1.0: bind() failure [ 538.302903][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 538.317425][ T25] cdc_ncm 5-1:1.1: bind() failure [ 538.328550][T15789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2839'. [ 538.333716][ T25] usb 5-1: USB disconnect, device number 75 [ 538.343119][ T5211] udevd[5211]: setting owner of /dev/bus/usb/005/075 to uid=0, gid=0 failed: No such file or directory [ 538.743773][T15811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2845'. [ 538.759211][T15813] overlay: Bad value for 'redirect_dir' [ 538.885398][T15818] overlay: Bad value for 'redirect_dir' [ 539.094296][ T56] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 539.234381][ T5205] Bluetooth: hci4: command 0x0406 tx timeout [ 539.244565][ T5099] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 539.285192][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 539.290058][ T56] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 539.297437][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.301604][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.305427][ T56] usb 8-1: Product: syz [ 539.307302][ T56] usb 8-1: Manufacturer: syz [ 539.309528][ T56] usb 8-1: SerialNumber: syz [ 539.434559][ T5099] usb 5-1: Using ep0 maxpacket: 8 [ 539.442916][ T5099] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 539.465154][ T5099] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.469226][ T5099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.475554][ T5099] usb 5-1: Product: syz [ 539.479715][ T5099] usb 5-1: Manufacturer: syz [ 539.484941][ T5099] usb 5-1: SerialNumber: syz [ 539.795247][ T56] cdc_ncm 8-1:1.0: bind() failure [ 539.834687][T15813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 539.843131][ T56] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 539.861586][ T56] cdc_ncm 8-1:1.1: bind() failure [ 539.902997][ T56] usb 8-1: USB disconnect, device number 73 [ 540.097154][ T5099] cdc_ncm 5-1:1.0: bind() failure [ 540.103097][ T5099] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 540.106895][ T5099] cdc_ncm 5-1:1.1: bind() failure [ 540.120352][ T5099] usb 5-1: USB disconnect, device number 76 [ 540.453574][ T5205] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 540.753826][ T5205] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 540.877537][T15837] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 540.958441][T15840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.019095][T15840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.043584][T15840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.149404][ T5205] Bluetooth: unknown link type 32 [ 541.151943][ T5205] Bluetooth: hci1: connection err: -111 [ 541.849931][ T5205] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 541.884232][ T5205] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 542.122467][ T5205] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 542.138439][ T5205] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 542.334478][ T25] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 542.530989][ T25] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 542.538352][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.543305][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 542.547947][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.548668][T15863] overlay: Bad value for 'redirect_dir' [ 542.558620][ T25] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 542.563037][ T25] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 542.567999][ T25] usb 7-1: Product: syz [ 542.570219][ T25] usb 7-1: Manufacturer: syz [ 542.594483][ T5205] Bluetooth: hci0: command 0x0406 tx timeout [ 542.595166][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 542.604392][ T25] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 542.630184][T15866] overlay: Bad value for 'redirect_dir' [ 542.791387][ T1948] usb 7-1: USB disconnect, device number 75 [ 542.904483][ T9140] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 542.974328][ T5239] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 543.114324][ T9140] usb 6-1: Using ep0 maxpacket: 8 [ 543.118055][ T9140] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 543.123249][ T9140] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.126686][ T9140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.129800][ T9140] usb 6-1: Product: syz [ 543.131773][ T9140] usb 6-1: Manufacturer: syz [ 543.133753][ T9140] usb 6-1: SerialNumber: syz [ 543.164326][ T5239] usb 5-1: Using ep0 maxpacket: 8 [ 543.185737][ T5239] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 543.192345][ T5239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.204376][ T5239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.207786][ T5239] usb 5-1: Product: syz [ 543.209661][ T5239] usb 5-1: Manufacturer: syz [ 543.211855][ T5239] usb 5-1: SerialNumber: syz [ 543.335305][T15871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2862'. [ 543.463612][ T5205] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 543.512334][T15874] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 543.556142][ T9140] cdc_ncm 6-1:1.0: bind() failure [ 543.561857][ T9140] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 543.564419][ T9140] cdc_ncm 6-1:1.1: bind() failure [ 543.568564][ T9140] usb 6-1: USB disconnect, device number 83 [ 543.575495][T15863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2860'. [ 543.619084][T15877] overlay: Bad value for 'redirect_dir' [ 543.650580][ T5239] cdc_ncm 5-1:1.0: bind() failure [ 543.661147][ T5239] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 543.663893][ T5239] cdc_ncm 5-1:1.1: bind() failure [ 543.669137][ T5239] usb 5-1: USB disconnect, device number 77 [ 543.725937][T15881] overlay: Bad value for 'redirect_dir' [ 543.874554][ T5205] Bluetooth: hci4: command 0x0406 tx timeout [ 543.944521][ T8] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 544.054468][ T9140] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 544.124401][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 544.130521][ T8] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 544.138264][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.142732][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.146675][ T8] usb 7-1: Product: syz [ 544.147308][ T5205] Bluetooth: Frame is too long (len 18, expected len 4) [ 544.148699][ T8] usb 7-1: Manufacturer: syz [ 544.154720][ T8] usb 7-1: SerialNumber: syz [ 544.234387][ T9140] usb 8-1: Using ep0 maxpacket: 8 [ 544.239204][ T9140] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 544.249546][ T9140] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.254235][ T9140] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.258081][ T9140] usb 8-1: Product: syz [ 544.260033][ T9140] usb 8-1: Manufacturer: syz [ 544.262234][ T9140] usb 8-1: SerialNumber: syz [ 544.500641][ T5205] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 544.505981][ T5205] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 544.577191][ T8] cdc_ncm 7-1:1.0: bind() failure [ 544.587495][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2864'. [ 544.588740][ T8] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 544.595410][ T8] cdc_ncm 7-1:1.1: bind() failure [ 544.605505][ T8] usb 7-1: USB disconnect, device number 76 [ 544.674429][ T5205] Bluetooth: hci0: command 0x0406 tx timeout [ 544.687902][ T9140] cdc_ncm 8-1:1.0: bind() failure [ 544.694382][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2865'. [ 544.695903][ T9140] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 544.701532][ T9140] cdc_ncm 8-1:1.1: bind() failure [ 544.707287][ T9140] usb 8-1: USB disconnect, device number 74 [ 544.725402][ T5205] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 545.104430][ T825] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 545.297150][ T825] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 545.301245][ T825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.312746][ T825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 545.320910][ T5205] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 545.323122][ T825] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.341722][ T825] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 545.349697][ T825] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 545.357791][ T825] usb 6-1: Product: syz [ 545.363112][ T825] usb 6-1: Manufacturer: syz [ 545.399521][ T825] cdc_wdm 6-1:1.0: skipping garbage [ 545.411771][ T825] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 545.425007][T15910] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 545.629585][ T825] usb 6-1: USB disconnect, device number 84 [ 546.346898][ T5205] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 546.352884][ T5205] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 546.524433][ T5205] Bluetooth: hci1: command 0x0406 tx timeout [ 546.709056][T15916] overlay: Bad value for 'redirect_dir' [ 546.726088][ T5205] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 546.818273][T15924] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2877'. [ 547.074400][ T4171] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 547.135987][ T5205] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 547.142236][ T5205] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 547.264225][ T4171] usb 6-1: Using ep0 maxpacket: 8 [ 547.273208][ T4171] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 547.291026][ T4171] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.295231][ T4171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.298046][ T4171] usb 6-1: Product: syz [ 547.299563][ T4171] usb 6-1: Manufacturer: syz [ 547.301785][ T4171] usb 6-1: SerialNumber: syz [ 547.461701][T15937] overlay: Bad value for 'redirect_dir' [ 547.470921][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2880'. [ 547.743145][ T4171] cdc_ncm 6-1:1.0: bind() failure [ 547.747594][ T4171] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 547.749942][ T4171] cdc_ncm 6-1:1.1: bind() failure [ 547.759514][ T4171] usb 6-1: USB disconnect, device number 85 [ 547.763911][T15916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2875'. [ 547.814407][ T5239] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 548.024243][ T5239] usb 8-1: Using ep0 maxpacket: 8 [ 548.027540][ T5239] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 548.033758][ T5239] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.036947][ T5239] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.039731][ T5239] usb 8-1: Product: syz [ 548.041224][ T5239] usb 8-1: Manufacturer: syz [ 548.042794][ T5239] usb 8-1: SerialNumber: syz [ 548.131574][T15943] overlay: Bad value for 'redirect_dir' [ 548.204402][ T9140] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 548.395939][ T9140] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.399752][ T9140] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.403844][ T9140] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.408617][ T9140] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.416193][ T9140] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.420324][ T9140] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.424517][ T9140] usb 5-1: Product: syz [ 548.426475][ T9140] usb 5-1: Manufacturer: syz [ 548.429727][ T5205] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 548.434873][ T9140] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 548.438938][ T5205] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 548.462642][ T5239] cdc_ncm 8-1:1.0: bind() failure [ 548.468156][T15937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2881'. [ 548.470374][ T5239] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 548.476714][ T5239] cdc_ncm 8-1:1.1: bind() failure [ 548.484453][ T5239] usb 8-1: USB disconnect, device number 75 [ 548.484813][ T825] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 548.544059][T15951] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 548.594310][ T5205] Bluetooth: hci1: command 0x0406 tx timeout [ 548.647320][ T56] usb 5-1: USB disconnect, device number 78 [ 548.674299][ T825] usb 7-1: Using ep0 maxpacket: 8 [ 548.677974][ T825] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 548.683739][ T825] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.688621][ T825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.691965][ T825] usb 7-1: Product: syz [ 548.693397][ T825] usb 7-1: Manufacturer: syz [ 548.695346][ T825] usb 7-1: SerialNumber: syz [ 548.762746][T15954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2886'. [ 549.018872][ T5205] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 549.125003][ T825] cdc_ncm 7-1:1.0: bind() failure [ 549.139114][ T825] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 549.141926][ T825] cdc_ncm 7-1:1.1: bind() failure [ 549.159979][ T825] usb 7-1: USB disconnect, device number 77 [ 549.164660][ T5205] Bluetooth: hci4: command 0x0406 tx timeout [ 549.310916][ T5205] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 549.315176][ T5205] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 549.494817][T15968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.559451][T15968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.810576][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'. [ 550.088225][T15968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.299456][T15976] overlay: Bad value for 'redirect_dir' [ 550.333628][T15978] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 550.597146][T15985] overlay: Bad value for 'redirect_dir' [ 550.654464][ T4171] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 550.668439][ T5205] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 550.672186][ T5205] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 550.674389][ T5205] Bluetooth: hci1: command 0x0406 tx timeout [ 550.844266][ T4171] usb 5-1: Using ep0 maxpacket: 8 [ 550.855143][ T4171] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 550.874108][ T4171] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.878108][ T4171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.884283][ T4171] usb 5-1: Product: syz [ 550.886436][ T4171] usb 5-1: Manufacturer: syz [ 550.888778][ T4171] usb 5-1: SerialNumber: syz [ 550.889062][ T8] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 551.014356][ T825] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 551.026666][T15992] bond0: entered promiscuous mode [ 551.029203][T15992] bond_slave_0: entered promiscuous mode [ 551.032153][T15992] bond_slave_1: entered promiscuous mode [ 551.085181][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 551.089598][ T8] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 551.099892][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.103965][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.107673][ T8] usb 7-1: Product: syz [ 551.109588][ T8] usb 7-1: Manufacturer: syz [ 551.111676][ T8] usb 7-1: SerialNumber: syz [ 551.197111][ T825] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 551.201604][ T825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.206358][ T825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 551.210523][ T825] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.219322][ T825] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 551.223299][ T825] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 551.226151][ T825] usb 6-1: Product: syz [ 551.227624][ T825] usb 6-1: Manufacturer: syz [ 551.236807][ T825] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 551.309450][ T4171] cdc_ncm 5-1:1.0: bind() failure [ 551.314721][ T5205] Bluetooth: hci2: command 0x0406 tx timeout [ 551.316150][ T4171] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 551.321220][ T4171] cdc_ncm 5-1:1.1: bind() failure [ 551.322192][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2893'. [ 551.334704][ T4171] usb 5-1: USB disconnect, device number 79 [ 551.439310][ T5239] usb 6-1: USB disconnect, device number 86 [ 551.540439][ T8] cdc_ncm 7-1:1.0: bind() failure [ 551.545472][ T8] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 551.548622][ T8] cdc_ncm 7-1:1.1: bind() failure [ 551.552737][T15985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2896'. [ 551.561699][ T8] usb 7-1: USB disconnect, device number 78 [ 551.856856][T15991] bond0: left promiscuous mode [ 551.859320][T15991] bond_slave_0: left promiscuous mode [ 551.862334][T15991] bond_slave_1: left promiscuous mode [ 551.895122][ T5205] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 551.937311][T16008] can0: slcan on ttyS3. [ 552.007174][T16019] overlay: Bad value for 'redirect_dir' [ 552.044789][T16014] can0 (unregistered): slcan off ttyS3. [ 552.104493][ T5205] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 552.116677][T16024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.143179][T16028] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 552.184472][T16024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.287660][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 552.374351][ T9140] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 552.506322][T16043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2905'. [ 552.554315][ T9140] usb 6-1: Using ep0 maxpacket: 8 [ 552.561166][ T9140] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 552.570118][ T9140] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.575010][ T9140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.579451][ T9140] usb 6-1: Product: syz [ 552.581973][ T9140] usb 6-1: Manufacturer: syz [ 552.584450][ T9140] usb 6-1: SerialNumber: syz [ 552.699807][T16024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.764347][ T5205] Bluetooth: hci1: command 0x0406 tx timeout [ 552.877178][ T5205] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 552.884361][ T5205] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 553.032955][ T9140] cdc_ncm 6-1:1.0: bind() failure [ 553.050107][ T9140] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 553.063155][ T9140] cdc_ncm 6-1:1.1: bind() failure [ 553.076064][ T9140] usb 6-1: USB disconnect, device number 87 [ 553.083532][T16053] can0: slcan on ttyS3. [ 553.175605][T16053] can0 (unregistered): slcan off ttyS3. [ 553.248622][ T5205] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 553.374306][ T35] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 553.556314][ T35] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 553.559973][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.565575][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 553.569227][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.577933][ T35] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 553.582549][ T35] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 553.586655][ T35] usb 7-1: Product: syz [ 553.588743][ T35] usb 7-1: Manufacturer: syz [ 553.597109][ T35] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 553.651833][T16061] bond0: entered promiscuous mode [ 553.654502][T16061] bond_slave_0: entered promiscuous mode [ 553.657538][T16061] bond_slave_1: entered promiscuous mode [ 553.678924][T16063] can0: slcan on ttyS3. [ 553.755409][T16063] can0 (unregistered): slcan off ttyS3. [ 553.819224][ T825] usb 7-1: USB disconnect, device number 79 [ 553.838868][T16071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2913'. [ 553.913630][T16075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2914'. [ 554.130649][T16086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2915'. [ 554.216306][T16091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2916'. [ 554.497285][ T5205] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 554.497964][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 554.501249][ T5205] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 554.511979][T16060] bond0: left promiscuous mode [ 554.517518][T16060] bond_slave_0: left promiscuous mode [ 554.529079][T16060] bond_slave_1: left promiscuous mode [ 554.566050][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2918'. [ 554.668191][T16122] overlay: Bad value for 'redirect_dir' [ 554.706182][T16126] can0: slcan on ttyS3. [ 554.795845][T16126] can0 (unregistered): slcan off ttyS3. [ 554.925369][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 554.994367][ T35] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 555.184429][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 555.189599][ T35] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 555.197342][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.202260][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.206320][ T35] usb 7-1: Product: syz [ 555.208267][ T35] usb 7-1: Manufacturer: syz [ 555.210452][ T35] usb 7-1: SerialNumber: syz [ 555.735193][ T35] cdc_ncm 7-1:1.0: bind() failure [ 555.740083][ T35] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 555.744538][ T35] cdc_ncm 7-1:1.1: bind() failure [ 555.749426][ T35] usb 7-1: USB disconnect, device number 80 [ 555.844434][ T56] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 556.036600][ T56] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 556.040523][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.045274][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 556.049105][ T56] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.056615][ T56] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 556.060535][ T56] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 556.063718][ T56] usb 5-1: Product: syz [ 556.065558][ T56] usb 5-1: Manufacturer: syz [ 556.071058][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 556.073515][ T56] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 556.198439][T16145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2926'. [ 556.275252][ T825] usb 5-1: USB disconnect, device number 80 [ 556.386833][T16148] overlay: Bad value for 'redirect_dir' [ 556.476473][T16151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2928'. [ 556.514360][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 556.591885][T16155] bond0: entered promiscuous mode [ 556.594847][T16155] bond_slave_0: entered promiscuous mode [ 556.597388][T16155] bond_slave_1: entered promiscuous mode [ 556.744260][ T35] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 556.812542][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 556.816346][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 556.822001][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 556.877106][T16168] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2932'. [ 556.944224][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 556.948880][ T35] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 556.958588][ T35] usb 7-1: string descriptor 0 read error: -22 [ 556.961715][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.966429][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.111396][T16180] can0: slcan on ttyS3. [ 557.196645][T16148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 557.207158][T16180] can0 (unregistered): slcan off ttyS3. [ 557.236843][T16185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.297970][T16187] can0: slcan on ttyS3. [ 557.298946][T16185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.385667][T16187] can0 (unregistered): slcan off ttyS3. [ 557.412021][ T35] cdc_ncm 7-1:1.0: bind() failure [ 557.418478][ T35] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 557.424074][T16154] bond0: left promiscuous mode [ 557.429579][ T35] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 557.433891][T16154] bond_slave_0: left promiscuous mode [ 557.436498][ T35] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 557.436671][T16154] bond_slave_1: left promiscuous mode [ 557.441430][ T35] usb 7-1: USB disconnect, device number 81 [ 557.492777][T16194] overlay: Bad value for 'redirect_dir' [ 557.493294][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2927'. [ 557.505307][T16198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2937'. [ 557.821605][T16185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.849826][ T9140] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 558.044315][ T9140] usb 5-1: Using ep0 maxpacket: 8 [ 558.058327][ T9140] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 558.072510][ T9140] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.077729][ T9140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.082246][ T9140] usb 5-1: Product: syz [ 558.084856][ T9140] usb 5-1: Manufacturer: syz [ 558.088302][ T9140] usb 5-1: SerialNumber: syz [ 558.425328][ T8] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 558.674686][ T8] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 558.679848][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.684809][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 558.689187][ T8] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.703048][ T8] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 558.707468][ T8] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 558.711310][ T8] usb 7-1: Product: syz [ 558.713395][ T8] usb 7-1: Manufacturer: syz [ 558.727601][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 558.730349][ T8] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 558.834457][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 559.636649][ T9140] cdc_ncm 5-1:1.0: bind() failure [ 559.641406][ T8] usb 7-1: USB disconnect, device number 82 [ 559.647342][ T9140] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 559.650597][ T9140] cdc_ncm 5-1:1.1: bind() failure [ 559.675123][ T9140] usb 5-1: USB disconnect, device number 81 [ 559.909763][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 560.081764][T16235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.136801][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 560.142466][T16235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.182925][T16237] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 560.213540][T16239] can0: slcan on ttyS3. [ 560.271445][T12736] Bluetooth: unknown link type 32 [ 560.273677][T12736] Bluetooth: hci2: connection err: -111 [ 560.295410][T16239] can0 (unregistered): slcan off ttyS3. [ 560.406924][T16246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2946'. [ 560.470257][T16248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2947'. [ 560.594322][T16252] overlay: Bad value for 'redirect_dir' [ 560.671280][T16235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.268675][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 561.272880][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 561.526828][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 561.544282][ T8] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 561.734224][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 561.762152][ T8] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 561.773209][ T8] usb 7-1: string descriptor 0 read error: -22 [ 561.776771][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 561.780460][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.004348][ T9140] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 562.010428][T16252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 562.197221][ T9140] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 562.201651][ T9140] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.206489][ T9140] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 562.211006][ T9140] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.221343][ T8] cdc_ncm 7-1:1.0: bind() failure [ 562.222753][ T9140] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 562.226539][ T8] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 562.227527][ T9140] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 562.228666][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2948'. [ 562.231712][ T8] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 562.233852][ T9140] usb 8-1: Product: syz [ 562.239546][ T8] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 562.240549][ T9140] usb 8-1: Manufacturer: syz [ 562.246165][ T8] usb 7-1: USB disconnect, device number 83 [ 562.276941][ T9140] cdc_wdm 8-1:1.0: skipping garbage [ 562.279260][ T9140] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 562.421448][T16272] overlay: Bad value for 'redirect_dir' [ 562.474506][ T56] usb 8-1: USB disconnect, device number 76 [ 562.745805][ T8] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 562.779882][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 562.822890][T16276] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 562.926959][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 562.935546][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 562.945815][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.948957][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.951664][ T8] usb 5-1: Product: syz [ 562.953202][ T8] usb 5-1: Manufacturer: syz [ 562.955309][ T8] usb 5-1: SerialNumber: syz [ 563.060290][T16279] veth1_macvtap: left promiscuous mode [ 563.062735][T16279] macsec0: entered promiscuous mode [ 563.074331][T16279] macsec0: entered allmulticast mode [ 563.154511][T16285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2957'. [ 563.225429][T16283] veth1_macvtap: left promiscuous mode [ 563.228571][T16283] macsec0: entered promiscuous mode [ 563.231434][T16283] macsec0: entered allmulticast mode [ 563.300187][T16289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2960'. [ 563.314608][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 563.383002][ T8] cdc_ncm 5-1:1.0: bind() failure [ 563.393810][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 563.402378][ T8] cdc_ncm 5-1:1.1: bind() failure [ 563.413153][ T8] usb 5-1: USB disconnect, device number 82 [ 563.689327][T12736] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 564.106239][T12736] Bluetooth: unknown link type 32 [ 564.108863][T12736] Bluetooth: hci1: connection err: -111 [ 564.138558][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'. [ 564.224116][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 564.261244][T16304] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 564.464345][ T56] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 564.491538][T16307] overlay: Bad value for 'redirect_dir' [ 564.659563][ T56] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.663015][ T56] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.666652][ T56] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.670070][ T56] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.680552][ T56] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.684358][ T56] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.687324][ T56] usb 8-1: Product: syz [ 564.689086][ T56] usb 8-1: Manufacturer: syz [ 564.700310][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 564.702297][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 564.704450][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 564.706675][ T56] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 564.835077][ T8] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 564.915126][ T56] usb 8-1: USB disconnect, device number 77 [ 565.014342][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 565.022279][ T8] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 565.028677][ T8] usb 7-1: language id specifier not provided by device, defaulting to English [ 565.043918][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.050686][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.055199][ T8] usb 7-1: Product: syz [ 565.058436][ T8] usb 7-1: Manufacturer: syz [ 565.060908][ T8] usb 7-1: SerialNumber: syz [ 565.102032][T16314] bond0: entered promiscuous mode [ 565.104791][T16314] bond_slave_0: entered promiscuous mode [ 565.107549][T16314] bond_slave_1: entered promiscuous mode [ 565.505557][ T8] cdc_ncm 7-1:1.0: bind() failure [ 565.514660][ T8] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 565.518138][ T8] cdc_ncm 7-1:1.1: bind() failure [ 565.526894][ T8] usb 7-1: USB disconnect, device number 84 [ 565.557829][T16309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2966'. [ 565.625564][T16328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2970'. [ 565.908560][T16334] overlay: Bad value for 'redirect_dir' [ 565.931348][T16313] bond0: left promiscuous mode [ 565.933165][T16313] bond_slave_0: left promiscuous mode [ 565.938540][T16313] bond_slave_1: left promiscuous mode [ 565.960543][T16337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2972'. [ 565.989946][T12736] Bluetooth: Frame is too long (len 18, expected len 4) [ 566.137200][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 566.193873][T16350] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 566.304283][T13778] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 566.424441][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 566.517236][T13778] usb 8-1: Using ep0 maxpacket: 8 [ 566.520644][T13778] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 566.527912][T13778] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.531832][T13778] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.536180][T13778] usb 8-1: Product: syz [ 566.538026][T13778] usb 8-1: Manufacturer: syz [ 566.539791][T13778] usb 8-1: SerialNumber: syz [ 566.548453][T16371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.608338][T16371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.960049][T13778] cdc_ncm 8-1:1.0: bind() failure [ 566.963666][T13778] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 566.966397][T13778] cdc_ncm 8-1:1.1: bind() failure [ 566.970556][T13778] usb 8-1: USB disconnect, device number 78 [ 567.122697][T16373] bond0: entered promiscuous mode [ 567.125262][T16373] bond_slave_0: entered promiscuous mode [ 567.128784][T16373] bond_slave_1: entered promiscuous mode [ 567.132121][T16371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.179898][T16375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2980'. [ 567.661757][T16394] bond0: entered promiscuous mode [ 567.664271][T16394] bond_slave_0: entered promiscuous mode [ 567.667174][T16394] bond_slave_1: entered promiscuous mode [ 567.897883][T12736] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 568.006027][T16372] bond0: left promiscuous mode [ 568.008043][T16372] bond_slave_0: left promiscuous mode [ 568.010797][T16372] bond_slave_1: left promiscuous mode [ 568.088003][T16409] overlay: Bad value for 'redirect_dir' [ 568.240560][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 568.286636][T16419] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 568.321424][T16424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2986'. [ 568.427504][T13778] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 568.503711][T16393] bond0: left promiscuous mode [ 568.507199][T16393] bond_slave_0: left promiscuous mode [ 568.509786][T16393] bond_slave_1: left promiscuous mode [ 568.529380][ T1356] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.532301][ T1356] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.589660][T16438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.614250][T13778] usb 6-1: Using ep0 maxpacket: 8 [ 568.617760][T13778] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 568.622500][T13778] usb 6-1: language id specifier not provided by device, defaulting to English [ 568.628266][T13778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.628540][T16442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.631339][T13778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.631356][T13778] usb 6-1: Product: syz [ 568.631363][T13778] usb 6-1: Manufacturer: syz [ 568.631371][T13778] usb 6-1: SerialNumber: syz [ 568.648752][T16438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.679677][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2987'. [ 568.696840][T16442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.048535][T13778] cdc_ncm 6-1:1.0: bind() failure [ 569.056126][T13778] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 569.063776][T13778] cdc_ncm 6-1:1.1: bind() failure [ 569.064446][T16409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2984'. [ 569.074861][T13778] usb 6-1: USB disconnect, device number 88 [ 569.170481][T16438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.216218][T16442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.317249][T12736] Bluetooth: unknown link type 32 [ 569.320040][T12736] Bluetooth: hci0: connection err: -111 [ 569.469408][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 569.706770][T16472] overlay: Bad value for 'redirect_dir' [ 570.094526][ T8] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 570.287232][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 570.295806][ T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 570.303132][ T8] usb 6-1: language id specifier not provided by device, defaulting to English [ 570.308796][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.312613][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.317449][ T8] usb 6-1: Product: syz [ 570.319072][ T8] usb 6-1: Manufacturer: syz [ 570.320762][ T8] usb 6-1: SerialNumber: syz [ 570.342452][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 570.347637][T16477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2997'. [ 570.468723][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 570.472988][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 570.602280][T16489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.622992][T12736] Bluetooth: unknown link type 32 [ 570.624977][T12736] Bluetooth: hci2: connection err: -111 [ 570.666982][T16489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.749965][ T8] cdc_ncm 6-1:1.0: bind() failure [ 570.759575][ T8] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 570.759590][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2994'. [ 570.762540][ T8] cdc_ncm 6-1:1.1: bind() failure [ 570.780770][ T8] usb 6-1: USB disconnect, device number 89 [ 570.873813][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'. [ 571.182759][T16489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.235925][T16496] can0: slcan on ttyS3. [ 571.327134][T16496] can0 (unregistered): slcan off ttyS3. [ 571.332636][T16501] overlay: Bad value for 'redirect_dir' [ 571.572786][T12736] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 571.686169][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 571.694469][ T5099] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 571.812373][T16526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3008'. [ 571.884365][ T5099] usb 6-1: Using ep0 maxpacket: 8 [ 571.889300][ T5099] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 571.894898][ T5099] usb 6-1: language id specifier not provided by device, defaulting to English [ 571.901593][ T5099] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.906221][ T5099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.910193][ T5099] usb 6-1: Product: syz [ 571.912243][ T5099] usb 6-1: Manufacturer: syz [ 571.912244][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 571.912264][ T5099] usb 6-1: SerialNumber: syz [ 571.914564][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 572.014529][T16533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.073588][T16533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.090460][T16535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.151162][T16535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.162100][T16535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.336205][ T5099] cdc_ncm 6-1:1.0: bind() failure [ 572.341918][ T5099] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 572.345267][ T5099] cdc_ncm 6-1:1.1: bind() failure [ 572.350690][ T5099] usb 6-1: USB disconnect, device number 90 [ 572.352960][T16501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3003'. [ 572.411915][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 572.514284][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 572.589663][T16533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.692019][T12736] Bluetooth: unknown link type 32 [ 572.695148][T12736] Bluetooth: hci4: connection err: -111 [ 572.709753][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 572.754086][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'. [ 573.502745][T16558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3018'. [ 573.922816][T16561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.954790][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 573.990003][T16561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.480364][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 574.513916][T16561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.622989][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.651926][T16575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.680011][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.713380][T16575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.723925][T16575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.189138][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.345967][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 575.387650][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 576.389849][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 576.403157][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 576.917888][T16601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.920056][T12736] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 576.994314][T16601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.129956][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 577.133661][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 577.151283][T16610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.209776][T16610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.212255][T16612] overlay: Bad value for 'redirect_dir' [ 577.411604][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 577.536434][T16601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.554390][ T5240] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 577.598097][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 577.727087][T16610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.745271][ T5240] usb 5-1: Using ep0 maxpacket: 8 [ 577.755499][ T5240] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 577.760929][ T5240] usb 5-1: language id specifier not provided by device, defaulting to English [ 577.767494][T16626] overlay: Bad value for 'redirect_dir' [ 577.767514][ T5240] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.774665][ T5240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.778428][ T5240] usb 5-1: Product: syz [ 577.780328][ T5240] usb 5-1: Manufacturer: syz [ 577.782266][ T5240] usb 5-1: SerialNumber: syz [ 578.124464][ T9140] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 578.209340][ T5240] cdc_ncm 5-1:1.0: bind() failure [ 578.220910][ T5240] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 578.224660][ T5240] cdc_ncm 5-1:1.1: bind() failure [ 578.233831][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3035'. [ 578.237249][ T5240] usb 5-1: USB disconnect, device number 83 [ 578.314523][ T9140] usb 6-1: Using ep0 maxpacket: 8 [ 578.324392][ T9140] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 578.333344][ T9140] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.337183][ T9140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.341292][ T9140] usb 6-1: Product: syz [ 578.343378][ T9140] usb 6-1: Manufacturer: syz [ 578.346718][ T9140] usb 6-1: SerialNumber: syz [ 578.444735][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 578.810753][ T9140] cdc_ncm 6-1:1.0: bind() failure [ 578.829268][T16626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3039'. [ 578.866064][ T9140] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 578.869255][ T9140] cdc_ncm 6-1:1.1: bind() failure [ 578.913751][ T9140] usb 6-1: USB disconnect, device number 91 [ 580.036890][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 580.048240][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 580.331566][T16646] veth1_macvtap: left promiscuous mode [ 580.341278][T16646] macsec0: entered promiscuous mode [ 580.344493][T16646] macsec0: entered allmulticast mode [ 580.396309][T16649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.471884][T16649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.524338][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 580.588552][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 580.993760][T16649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.139355][T16658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.179161][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'. [ 581.203804][T16658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.211643][T16658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.552646][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 581.558532][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 581.881646][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 581.886585][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 582.073819][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 582.092733][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 582.260603][T16687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.324094][T16687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.340296][T16689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3059'. [ 582.364303][ T5099] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 582.525932][ T5099] usb 6-1: device descriptor read/64, error -71 [ 582.594366][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 582.825200][ T5099] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 582.829053][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 582.848785][T16687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.868378][T16697] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 582.974372][ T5099] usb 6-1: device descriptor read/64, error -71 [ 582.989341][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 582.993895][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 583.095151][ T5099] usb usb6-port1: attempt power cycle [ 583.161101][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.224980][T16706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.235639][T16704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.409720][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 583.514328][ T5099] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 583.554400][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 583.559223][ T5099] usb 6-1: device descriptor read/8, error -71 [ 583.673553][T16710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3066'. [ 583.861449][ T5099] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 583.901438][ T5099] usb 6-1: device descriptor read/8, error -71 [ 583.954369][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 584.025879][ T5099] usb usb6-port1: unable to enumerate USB device [ 584.128460][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 584.160250][T16722] bond0: entered promiscuous mode [ 584.162542][T16722] bond_slave_0: entered promiscuous mode [ 584.165822][T16722] bond_slave_1: entered promiscuous mode [ 584.343216][T16727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.399181][T16727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.917106][T16727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.035488][T16720] bond0: left promiscuous mode [ 585.037617][T16720] bond_slave_0: left promiscuous mode [ 585.039607][T16720] bond_slave_1: left promiscuous mode [ 585.047926][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 585.092251][T16746] overlay: Bad value for 'redirect_dir' [ 585.110652][T16750] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 585.283774][T16756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.350537][T16756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.371102][T16756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.534372][ T56] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 585.724249][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 585.735665][ T56] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 585.740144][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3077'. [ 585.744756][ T56] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.748212][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.751009][ T56] usb 6-1: Product: syz [ 585.752566][ T56] usb 6-1: Manufacturer: syz [ 585.755760][ T56] usb 6-1: SerialNumber: syz [ 585.965797][T16773] overlay: Bad value for 'redirect_dir' [ 586.034392][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 586.049918][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 586.148697][T16782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.188830][ T56] cdc_ncm 6-1:1.0: bind() failure [ 586.192615][ T56] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 586.195332][ T56] cdc_ncm 6-1:1.1: bind() failure [ 586.198798][ T56] usb 6-1: USB disconnect, device number 96 [ 586.204534][T16782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.346866][ T5099] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 586.524287][ T5099] usb 5-1: Using ep0 maxpacket: 8 [ 586.528054][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 586.532390][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 586.533292][ T5099] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 586.544506][ T5099] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.549149][ T5099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.552694][ T5099] usb 5-1: Product: syz [ 586.555246][ T5099] usb 5-1: Manufacturer: syz [ 586.557380][ T5099] usb 5-1: SerialNumber: syz [ 586.725121][T16782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.985668][ T5099] cdc_ncm 5-1:1.0: bind() failure [ 586.991498][ T5099] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 586.998385][ T5099] cdc_ncm 5-1:1.1: bind() failure [ 586.999990][T16773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3078'. [ 587.003560][ T5099] usb 5-1: USB disconnect, device number 84 [ 587.004291][ T5240] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 587.238764][ T5240] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.243432][ T5240] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 587.247720][ T5240] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 587.251920][ T5240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.264454][ T5240] usb 7-1: config 0 descriptor?? [ 587.683725][ T5240] usb 7-1: string descriptor 0 read error: -71 [ 587.687127][ T5240] usb 7-1: USB disconnect, device number 85 [ 587.687386][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 587.701817][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 587.801602][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 587.827695][T16801] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 588.019623][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 588.099835][T16814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3089'. [ 588.114515][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 588.240151][T16819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.304280][T16819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.828466][T16819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.714288][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 589.914426][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 589.996427][T16836] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 590.194365][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 590.381087][T12736] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 590.502641][T16850] overlay: Bad value for 'redirect_dir' [ 590.532143][T16853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.593122][T16853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.774282][T16224] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 590.834593][ T56] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 590.957408][T16224] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.961710][T16224] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 590.965639][T16224] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.969606][T16224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.975416][T16224] usb 8-1: config 0 descriptor?? [ 591.024436][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 591.030546][ T56] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 591.036868][ T56] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.040219][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.043096][ T56] usb 6-1: Product: syz [ 591.044664][ T56] usb 6-1: Manufacturer: syz [ 591.046282][ T56] usb 6-1: SerialNumber: syz [ 591.101043][T16853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.132634][T16856] bond0: entered promiscuous mode [ 591.135317][T16856] bond_slave_0: entered promiscuous mode [ 591.137922][T16856] bond_slave_1: entered promiscuous mode [ 591.383529][T16224] usb 8-1: string descriptor 0 read error: -71 [ 591.388714][T16224] usb 8-1: USB disconnect, device number 79 [ 591.464565][ T56] cdc_ncm 6-1:1.0: bind() failure [ 591.468289][ T56] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 591.470659][ T56] cdc_ncm 6-1:1.1: bind() failure [ 591.474109][ T56] usb 6-1: USB disconnect, device number 97 [ 591.961322][T16855] bond0: left promiscuous mode [ 591.963855][T16855] bond_slave_0: left promiscuous mode [ 591.966880][T16855] bond_slave_1: left promiscuous mode [ 592.006882][T16876] bond0: entered promiscuous mode [ 592.008745][T16876] bond_slave_0: entered promiscuous mode [ 592.011064][T16876] bond_slave_1: entered promiscuous mode [ 592.080478][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 592.083663][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 592.159601][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 592.226317][T16892] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 592.337087][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 592.465256][T16910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3109'. [ 592.546836][T12736] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 592.871752][T16875] bond0: left promiscuous mode [ 592.875498][T16875] bond_slave_0: left promiscuous mode [ 592.878448][T16875] bond_slave_1: left promiscuous mode [ 593.095207][ T825] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 593.341858][ T825] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.346661][ T825] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.351454][ T825] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.369029][ T825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.382423][ T825] usb 8-1: config 0 descriptor?? [ 593.586254][T16954] bond0: entered promiscuous mode [ 593.588885][T16954] bond_slave_0: entered promiscuous mode [ 593.591385][T16954] bond_slave_1: entered promiscuous mode [ 593.793487][ T825] usb 8-1: string descriptor 0 read error: -71 [ 593.797906][ T825] usb 8-1: USB disconnect, device number 80 [ 594.117047][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 594.481902][T16953] bond0: left promiscuous mode [ 594.484290][T16953] bond_slave_0: left promiscuous mode [ 594.486857][T16953] bond_slave_1: left promiscuous mode [ 594.584462][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 594.689057][T16984] bond0: entered promiscuous mode [ 594.691711][T16984] bond_slave_0: entered promiscuous mode [ 594.697202][T16984] bond_slave_1: entered promiscuous mode [ 594.708255][T16982] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 594.964901][T16994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3120'. [ 595.060185][T12736] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 595.277052][T17011] bond0: entered promiscuous mode [ 595.279519][T17011] bond_slave_0: entered promiscuous mode [ 595.281681][T17011] bond_slave_1: entered promiscuous mode [ 595.397587][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 595.401662][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 595.551237][T16983] bond0: left promiscuous mode [ 595.555757][T16983] bond_slave_0: left promiscuous mode [ 595.557942][T16983] bond_slave_1: left promiscuous mode [ 595.600709][T17029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.673129][T17033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.181617][T17029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.215391][T17010] bond0: left promiscuous mode [ 596.217649][T17010] bond_slave_0: left promiscuous mode [ 596.230261][T17010] bond_slave_1: left promiscuous mode [ 596.313402][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 596.320085][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 596.412943][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 596.500383][T17056] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 596.996864][T17078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.060572][T17078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.071634][T17078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.474316][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 598.060297][T17111] overlay: Bad value for 'redirect_dir' [ 598.295912][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 598.301249][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 598.364440][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 598.424601][ T825] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 598.454821][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 598.492722][T17132] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 598.581463][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 598.690489][ T825] usb 6-1: Using ep0 maxpacket: 8 [ 598.699801][ T825] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 598.711155][ T825] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.734440][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.738074][ T825] usb 6-1: Product: syz [ 598.739991][ T825] usb 6-1: Manufacturer: syz [ 598.741735][ T825] usb 6-1: SerialNumber: syz [ 598.889650][T17142] overlay: Bad value for 'redirect_dir' [ 599.203410][ T825] cdc_ncm 6-1:1.0: bind() failure [ 599.211807][ T825] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 599.213425][T17111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3135'. [ 599.215932][ T825] cdc_ncm 6-1:1.1: bind() failure [ 599.230538][ T825] usb 6-1: USB disconnect, device number 98 [ 599.244384][T16224] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 599.434830][T16224] usb 5-1: Using ep0 maxpacket: 8 [ 599.441584][T16224] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 599.453263][T16224] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.457678][T16224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.461013][T16224] usb 5-1: Product: syz [ 599.462738][T16224] usb 5-1: Manufacturer: syz [ 599.464862][T16224] usb 5-1: SerialNumber: syz [ 599.543531][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 599.851153][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 599.857175][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 599.893426][T16224] cdc_ncm 5-1:1.0: bind() failure [ 599.915033][T16224] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 599.918324][T16224] cdc_ncm 5-1:1.1: bind() failure [ 599.938832][T16224] usb 5-1: USB disconnect, device number 85 [ 600.453107][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 601.316898][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 601.334811][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 601.771758][T12736] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 601.783858][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 601.849451][T17200] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 601.877621][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 601.886176][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 602.070778][T17214] overlay: Bad value for 'redirect_dir' [ 602.414249][ T9359] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 602.449893][T17218] overlay: Bad value for 'redirect_dir' [ 602.604242][ T9359] usb 7-1: Using ep0 maxpacket: 8 [ 602.615798][ T9359] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 602.622114][ T9359] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.626272][ T9359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.629588][ T9359] usb 7-1: Product: syz [ 602.631421][ T9359] usb 7-1: Manufacturer: syz [ 602.633608][ T9359] usb 7-1: SerialNumber: syz [ 602.702922][T17222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3155'. [ 602.794307][ T8] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 602.974336][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 602.980965][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 602.989434][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.993763][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.998251][ T8] usb 5-1: Product: syz [ 603.000237][ T8] usb 5-1: Manufacturer: syz [ 603.002356][ T8] usb 5-1: SerialNumber: syz [ 603.065191][ T9359] cdc_ncm 7-1:1.0: bind() failure [ 603.071498][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3153'. [ 603.072991][ T9359] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 603.079580][ T9359] cdc_ncm 7-1:1.1: bind() failure [ 603.090936][ T9359] usb 7-1: USB disconnect, device number 86 [ 603.177747][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 603.184283][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 603.394431][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 603.448652][ T8] cdc_ncm 5-1:1.0: bind() failure [ 603.453844][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 603.457225][ T8] cdc_ncm 5-1:1.1: bind() failure [ 603.462245][ T8] usb 5-1: USB disconnect, device number 86 [ 603.517248][T17218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3154'. [ 603.906061][ T9359] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 604.113572][ T9359] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 604.119609][ T9359] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.124924][ T9359] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 604.132087][ T9359] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.149239][ T9359] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 604.153556][ T9359] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 604.160255][ T9359] usb 7-1: Product: syz [ 604.162511][ T9359] usb 7-1: Manufacturer: syz [ 604.178015][ T9359] cdc_wdm 7-1:1.0: skipping garbage [ 604.181314][ T9359] cdc_wdm 7-1:1.0: skipping garbage [ 604.186197][T17258] overlay: Bad value for 'redirect_dir' [ 604.186945][ T9359] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 604.192171][ T9359] cdc_wdm 7-1:1.0: Unknown control protocol [ 604.390360][ T5099] usb 7-1: USB disconnect, device number 87 [ 604.614655][ T56] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 604.766625][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 604.824298][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 604.829252][ T56] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 604.838842][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.843036][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.850841][ T56] usb 5-1: Product: syz [ 604.852947][ T56] usb 5-1: Manufacturer: syz [ 604.860106][ T56] usb 5-1: SerialNumber: syz [ 604.969786][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 605.018177][T17275] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 605.244253][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 605.302190][ T56] cdc_ncm 5-1:1.0: bind() failure [ 605.318173][ T56] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 605.322861][ T56] cdc_ncm 5-1:1.1: bind() failure [ 605.334644][ T56] usb 5-1: USB disconnect, device number 87 [ 605.382300][T17283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3166'. [ 605.564529][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 605.568691][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 607.062557][T12736] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 607.245620][T17305] veth1_macvtap: left promiscuous mode [ 607.249044][T17305] macsec0: entered promiscuous mode [ 607.251908][T17305] macsec0: entered allmulticast mode [ 607.403910][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 607.452932][T17307] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 607.634596][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 608.105332][T17316] can0: slcan on ttyS3. [ 608.186205][T17316] can0 (unregistered): slcan off ttyS3. [ 609.152194][T17332] overlay: Bad value for 'redirect_dir' [ 609.544409][ T9359] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 609.735387][ T9359] usb 6-1: Using ep0 maxpacket: 8 [ 609.761789][ T9359] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 609.779254][ T9359] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 609.792108][ T9359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.811348][ T9359] usb 6-1: Product: syz [ 609.813223][ T9359] usb 6-1: Manufacturer: syz [ 609.815596][ T9359] usb 6-1: SerialNumber: syz [ 610.647037][ T9359] cdc_ncm 6-1:1.0: bind() failure [ 610.671830][ T9359] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 610.675608][ T9359] cdc_ncm 6-1:1.1: bind() failure [ 610.695787][ T9359] usb 6-1: USB disconnect, device number 99 [ 610.714995][T12736] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 611.308358][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 611.313167][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 611.575989][T17364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3188'. [ 612.048422][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 612.052491][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 612.114582][T17373] can0: slcan on ttyS3. [ 612.210751][T17375] overlay: Bad value for 'redirect_dir' [ 612.358063][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 612.366306][T17373] can0 (unregistered): slcan off ttyS3. [ 612.533245][T17390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.592406][T17390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.604600][ T25] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 612.650543][T17398] overlay: Bad value for 'redirect_dir' [ 612.784402][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 612.791588][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 612.805130][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.809178][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.812536][ T25] usb 5-1: Product: syz [ 612.814556][ T25] usb 5-1: Manufacturer: syz [ 612.816569][ T25] usb 5-1: SerialNumber: syz [ 612.984669][T13778] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 613.105655][T17390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.175109][T13778] usb 7-1: Using ep0 maxpacket: 8 [ 613.184627][T13778] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 613.205324][T13778] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.208729][T13778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.211904][T13778] usb 7-1: Product: syz [ 613.213805][T13778] usb 7-1: Manufacturer: syz [ 613.216573][T13778] usb 7-1: SerialNumber: syz [ 613.270955][ T25] cdc_ncm 5-1:1.0: bind() failure [ 613.290707][T17375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3192'. [ 613.305840][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 613.309910][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 613.309960][ T25] cdc_ncm 5-1:1.1: bind() failure [ 613.312808][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 613.315681][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 613.369166][ T25] usb 5-1: USB disconnect, device number 88 [ 613.686582][T13778] cdc_ncm 7-1:1.0: bind() failure [ 613.722733][T17398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3196'. [ 613.746206][T13778] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 613.749225][T13778] cdc_ncm 7-1:1.1: bind() failure [ 613.764598][T13778] usb 7-1: USB disconnect, device number 88 [ 613.858299][T17413] overlay: Bad value for 'redirect_dir' [ 613.972578][T17419] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3201'. [ 614.114459][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 614.205311][ T9140] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 614.404334][ T9140] usb 6-1: Using ep0 maxpacket: 8 [ 614.411227][ T9140] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 614.422253][ T9140] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.427385][ T9140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.430885][ T9140] usb 6-1: Product: syz [ 614.432677][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 614.434072][ T9140] usb 6-1: Manufacturer: syz [ 614.437237][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 614.444299][ T9140] usb 6-1: SerialNumber: syz [ 614.577814][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 614.760528][T17436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.810106][T17438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3206'. [ 614.821110][T17436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.895742][ T9140] cdc_ncm 6-1:1.0: bind() failure [ 614.904797][ T9140] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 614.907772][ T9140] cdc_ncm 6-1:1.1: bind() failure [ 614.916154][ T9140] usb 6-1: USB disconnect, device number 100 [ 615.338306][T17436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.204405][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 616.434431][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 616.810411][T17446] overlay: Bad value for 'redirect_dir' [ 616.897978][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 616.909644][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 617.194625][ T8] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 617.218280][T17458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3212'. [ 617.404250][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 617.432269][ T8] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 617.441986][ T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.446710][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.451081][ T8] usb 7-1: Product: syz [ 617.452861][ T8] usb 7-1: Manufacturer: syz [ 617.456529][ T8] usb 7-1: SerialNumber: syz [ 617.969072][ T8] cdc_ncm 7-1:1.0: bind() failure [ 617.982911][ T8] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 617.987184][ T8] cdc_ncm 7-1:1.1: bind() failure [ 617.993196][ T8] usb 7-1: USB disconnect, device number 89 [ 617.995032][T17446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3209'. [ 618.128704][T17466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3215'. [ 618.188600][T12736] Bluetooth: hci0: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 618.195438][T12736] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 618.256341][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 618.342396][T17472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.399652][T17472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.527672][T17478] can0: slcan on ttyS3. [ 618.858743][T17478] can0 (unregistered): slcan off ttyS3. [ 618.914279][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 618.931794][T17483] overlay: Bad value for 'redirect_dir' [ 619.073707][T17472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.122246][T17487] bond0: entered promiscuous mode [ 619.126561][T17487] bond_slave_0: entered promiscuous mode [ 619.128811][T17487] bond_slave_1: entered promiscuous mode [ 619.566656][T17499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3223'. [ 619.699692][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 619.707621][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 619.972722][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 619.978489][T17486] bond0: left promiscuous mode [ 619.979507][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 619.981928][T17486] bond_slave_0: left promiscuous mode [ 619.988298][T17486] bond_slave_1: left promiscuous mode [ 620.204948][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 620.268750][T12736] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 620.419434][T17525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3227'. [ 620.596461][T17534] overlay: Bad value for 'redirect_dir' [ 620.599468][T17533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.671201][T17533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.975291][ T9140] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 621.164289][ T9140] usb 7-1: Using ep0 maxpacket: 8 [ 621.173092][ T9140] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 621.183418][ T9140] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.188221][ T9140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.192491][ T9140] usb 7-1: Product: syz [ 621.195898][ T9140] usb 7-1: Manufacturer: syz [ 621.198603][ T9140] usb 7-1: SerialNumber: syz [ 621.203762][T17533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.354311][ T8] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 621.515505][T17556] overlay: Bad value for 'redirect_dir' [ 621.554637][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.561261][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 621.567913][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 621.571762][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.578516][ T8] usb 6-1: config 0 descriptor?? [ 621.583865][ T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 621.648583][ T9140] cdc_ncm 7-1:1.0: bind() failure [ 621.658924][ T9140] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 621.660067][T17534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3228'. [ 621.661994][ T9140] cdc_ncm 7-1:1.1: bind() failure [ 621.674319][ T9140] usb 7-1: USB disconnect, device number 90 [ 621.724337][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 622.125810][T17564] overlay: Bad value for 'redirect_dir' [ 622.174272][T12736] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 622.178409][T12736] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 622.249997][T17568] overlay: Bad value for 'redirect_dir' [ 622.402855][T12736] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 622.454621][ T8] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 622.576856][T17578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.596950][ T56] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 622.638239][T17579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.649105][T17578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.704296][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 622.708870][ T8] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 622.784319][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 622.788909][ T56] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 623.242894][T17581] can0: slcan on ttyS3. [ 623.326184][T17581] can0 (unregistered): slcan off ttyS3. [ 623.423045][T17588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.481047][T17588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.794407][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 624.004432][T17588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.007107][ T825] usb 6-1: USB disconnect, device number 101 [ 625.118429][ T8] usb 8-1: string descriptor 0 read error: -71 [ 625.121761][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.127110][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.138258][ T8] usb 8-1: can't set config #1, error -71 [ 625.142194][ T8] usb 8-1: USB disconnect, device number 81 [ 625.229134][ T56] usb 7-1: string descriptor 0 read error: -71 [ 625.232334][ T56] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.236722][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.242632][ T56] usb 7-1: can't set config #1, error -71 [ 625.246633][ T56] usb 7-1: USB disconnect, device number 91 [ 625.874426][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 626.065167][T17604] overlay: Bad value for 'redirect_dir' [ 626.205858][T17613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.241435][T12736] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 626.265588][T17613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.275261][T17613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.441493][T17619] can0: slcan on ttyS3. [ 626.527544][T17619] can0 (unregistered): slcan off ttyS3. [ 626.592744][T17625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.663945][T17625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.823490][T12736] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 626.834352][T12736] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 626.863312][T17638] overlay: Bad value for 'redirect_dir' [ 626.972046][T17644] overlay: Bad value for 'redirect_dir' [ 627.175619][T17625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.224500][ T825] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 627.315053][T13778] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 627.424314][ T825] usb 5-1: Using ep0 maxpacket: 8 [ 627.432409][ T825] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 627.504393][T13778] usb 8-1: Using ep0 maxpacket: 8 [ 627.515015][T13778] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 628.710249][T12736] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 628.835160][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 628.986488][T17660] can0: slcan on ttyS3. [ 629.134887][T17660] can0 (unregistered): slcan off ttyS3. [ 629.193721][T17662] bond0: entered promiscuous mode [ 629.197705][T17662] bond_slave_0: entered promiscuous mode [ 629.201354][T17662] bond_slave_1: entered promiscuous mode [ 629.857660][ T825] usb 5-1: string descriptor 0 read error: -71 [ 629.866504][ T825] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.896080][ T825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.985910][ T1356] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.004847][ T1356] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.092239][T17661] bond0: left promiscuous mode [ 630.122855][T17661] bond_slave_0: left promiscuous mode [ 630.125982][T17661] bond_slave_1: left promiscuous mode [ 630.133932][ T1356] ================================================================== [ 630.138866][ T1356] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 630.144657][ T1356] Read of size 8 at addr ffff88801d439020 by task aoe_tx0/1356 [ 630.150733][ T1356] [ 630.151907][ T1356] CPU: 2 PID: 1356 Comm: aoe_tx0 Not tainted 6.10.0-rc5-syzkaller-00280-g27b31deb900d #0 [ 630.156751][ T1356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 630.162107][ T1356] Call Trace: [ 630.163848][ T1356] [ 630.165422][ T1356] dump_stack_lvl+0x116/0x1f0 [ 630.168447][ T1356] print_report+0xc3/0x620 [ 630.171080][ T1356] ? __virt_addr_valid+0x5e/0x580 [ 630.173653][ T1356] ? __phys_addr+0xc6/0x150 [ 630.175766][ T1356] kasan_report+0xd9/0x110 [ 630.177862][ T1356] ? tty_write_room+0x7d/0x90 [ 630.180061][ T1356] ? tty_write_room+0x7d/0x90 [ 630.182353][ T1356] tty_write_room+0x7d/0x90 [ 630.184481][ T1356] handle_tx+0x151/0x630 [ 630.186393][ T1356] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 630.189559][ T1356] dev_hard_start_xmit+0x143/0x790 [ 630.192084][ T1356] __dev_queue_xmit+0x7ba/0x4130 [ 630.194422][ T1356] ? __pfx___lock_acquire+0x10/0x10 [ 630.196679][ T1356] ? lock_acquire+0x1b1/0x560 [ 630.198702][ T1356] ? __pfx___dev_queue_xmit+0x10/0x10 [ 630.201216][ T1356] ? find_held_lock+0x2d/0x110 [ 630.203590][ T1356] ? tx+0xa8/0x190 [ 630.205288][ T1356] ? __pfx_lock_release+0x10/0x10 [ 630.207828][ T1356] ? do_raw_spin_lock+0x12d/0x2c0 [ 630.211139][ T1356] tx+0xcc/0x190 [ 630.213227][ T1356] ? __pfx_tx+0x10/0x10 [ 630.215562][ T1356] kthread+0x1e7/0x3c0 [ 630.217924][ T1356] ? __pfx_kthread+0x10/0x10 [ 630.220057][ T1356] ? __pfx_default_wake_function+0x10/0x10 [ 630.222615][ T1356] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.225206][ T1356] ? __kthread_parkme+0x148/0x220 [ 630.227860][ T1356] ? __pfx_kthread+0x10/0x10 [ 630.230587][ T1356] kthread+0x2c1/0x3a0 [ 630.232499][ T1356] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.234802][ T1356] ? __pfx_kthread+0x10/0x10 [ 630.237018][ T1356] ret_from_fork+0x45/0x80 [ 630.239053][ T1356] ? __pfx_kthread+0x10/0x10 [ 630.241339][ T1356] ret_from_fork_asm+0x1a/0x30 [ 630.243590][ T1356] [ 630.245124][ T1356] [ 630.246476][ T1356] Allocated by task 17662: [ 630.249076][ T1356] kasan_save_stack+0x33/0x60 [ 630.251973][ T1356] kasan_save_track+0x14/0x30 [ 630.254780][ T1356] __kasan_kmalloc+0xaa/0xb0 [ 630.257442][ T1356] alloc_tty_struct+0x98/0x8d0 [ 630.260345][ T1356] tty_init_dev.part.0+0x1e/0x660 [ 630.263029][ T1356] tty_init_dev+0x60/0x80 [ 630.265451][ T1356] ptmx_open+0x104/0x350 [ 630.267783][ T1356] chrdev_open+0x26d/0x6f0 [ 630.270193][ T1356] do_dentry_open+0x910/0x1930 [ 630.272950][ T1356] path_openat+0x1e3a/0x29f0 [ 630.275426][ T1356] do_filp_open+0x1dc/0x430 [ 630.277638][ T1356] do_sys_openat2+0x17a/0x1e0 [ 630.279861][ T1356] __x64_sys_openat+0x175/0x210 [ 630.282289][ T1356] do_syscall_64+0xcd/0x250 [ 630.284940][ T1356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.288199][ T1356] [ 630.289324][ T1356] Freed by task 30: [ 630.291147][ T1356] kasan_save_stack+0x33/0x60 [ 630.293698][ T1356] kasan_save_track+0x14/0x30 [ 630.296631][ T1356] kasan_save_free_info+0x3b/0x60 [ 630.300172][ T1356] poison_slab_object+0xf7/0x160 [ 630.303214][ T1356] __kasan_slab_free+0x32/0x50 [ 630.305761][ T1356] kfree+0x12a/0x3b0 [ 630.307985][ T1356] process_one_work+0x9c5/0x1b40 [ 630.310762][ T1356] worker_thread+0x6c8/0xf30 [ 630.312864][ T1356] kthread+0x2c1/0x3a0 [ 630.314964][ T1356] ret_from_fork+0x45/0x80 [ 630.317225][ T1356] ret_from_fork_asm+0x1a/0x30 [ 630.319780][ T1356] [ 630.321179][ T1356] Last potentially related work creation: [ 630.323862][ T1356] kasan_save_stack+0x33/0x60 [ 630.326000][ T1356] __kasan_record_aux_stack+0xba/0xd0 [ 630.328568][ T1356] insert_work+0x36/0x230 [ 630.330977][ T1356] __queue_work+0x944/0x1020 [ 630.333587][ T1356] queue_work_on+0x11a/0x140 [ 630.336083][ T1356] release_tty+0x4e1/0x600 [ 630.338168][ T1356] tty_release_struct+0xb7/0xe0 [ 630.340510][ T1356] tty_release+0xe33/0x1420 [ 630.342912][ T1356] __fput+0x408/0xbb0 [ 630.344757][ T1356] task_work_run+0x14e/0x250 [ 630.346951][ T1356] syscall_exit_to_user_mode+0x275/0x2a0 [ 630.349497][ T1356] do_syscall_64+0xda/0x250 [ 630.351577][ T1356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.354011][ T1356] [ 630.355186][ T1356] The buggy address belongs to the object at ffff88801d439000 [ 630.355186][ T1356] which belongs to the cache kmalloc-cg-2k of size 2048 [ 630.360997][ T1356] The buggy address is located 32 bytes inside of [ 630.360997][ T1356] freed 2048-byte region [ffff88801d439000, ffff88801d439800) [ 630.367016][ T1356] [ 630.368341][ T1356] The buggy address belongs to the physical page: [ 630.372498][ T1356] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d438 [ 630.377573][ T1356] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 630.382179][ T1356] memcg:ffff8880297fa301 [ 630.384064][ T1356] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 630.388080][ T1356] page_type: 0xffffefff(slab) [ 630.390814][ T1356] raw: 00fff00000000040 ffff888015450140 0000000000000000 dead000000000001 [ 630.394635][ T1356] raw: 0000000000000000 0000000080080008 00000001ffffefff ffff8880297fa301 [ 630.398974][ T1356] head: 00fff00000000040 ffff888015450140 0000000000000000 dead000000000001 [ 630.403725][ T1356] head: 0000000000000000 0000000080080008 00000001ffffefff ffff8880297fa301 [ 630.409527][ T1356] head: 00fff00000000003 ffffea0000750e01 ffffffffffffffff 0000000000000000 [ 630.414398][ T1356] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 630.418612][ T1356] page dumped because: kasan: bad access detected [ 630.421588][ T1356] page_owner tracks the page as allocated [ 630.424261][ T1356] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (syz-executor), ts 51210207418, free_ts 50950239668 [ 630.435574][ T1356] post_alloc_hook+0x2d1/0x350 [ 630.437877][ T1356] get_page_from_freelist+0x1353/0x2e50 [ 630.441065][ T1356] __alloc_pages_noprof+0x22b/0x2460 [ 630.444286][ T1356] alloc_slab_page+0x56/0x110 [ 630.446758][ T1356] new_slab+0x84/0x260 [ 630.449389][ T1356] ___slab_alloc+0xdac/0x1870 [ 630.452460][ T1356] __slab_alloc.constprop.0+0x56/0xb0 [ 630.455052][ T1356] kmalloc_node_track_caller_noprof+0x355/0x430 [ 630.458135][ T1356] kmemdup_noprof+0x29/0x60 [ 630.460602][ T1356] neigh_sysctl_register+0xb3/0x640 [ 630.463301][ T1356] devinet_sysctl_register+0xb6/0x200 [ 630.466345][ T1356] inetdev_init+0x28b/0x580 [ 630.469859][ T1356] inetdev_event+0xd23/0x19b0 [ 630.473173][ T1356] notifier_call_chain+0xb9/0x410 [ 630.475906][ T1356] call_netdevice_notifiers_info+0xbe/0x140 [ 630.479502][ T1356] register_netdevice+0x15fb/0x1cb0 [ 630.482653][ T1356] page last free pid 5198 tgid 5198 stack trace: [ 630.486804][ T1356] free_unref_page+0x64a/0xe40 [ 630.489863][ T1356] qlist_free_all+0x4e/0x140 [ 630.492644][ T1356] kasan_quarantine_reduce+0x192/0x1e0 [ 630.495450][ T1356] __kasan_slab_alloc+0x69/0x90 [ 630.498054][ T1356] kmalloc_trace_noprof+0x11e/0x300 [ 630.500630][ T1356] rtnl_newlink+0x49/0xa0 [ 630.502834][ T1356] rtnetlink_rcv_msg+0x3c7/0xea0 [ 630.505207][ T1356] netlink_rcv_skb+0x16b/0x440 [ 630.507480][ T1356] netlink_unicast+0x542/0x820 [ 630.509747][ T1356] netlink_sendmsg+0x8b8/0xd70 [ 630.512073][ T1356] __sys_sendto+0x47f/0x4e0 [ 630.514591][ T1356] __x64_sys_sendto+0xe0/0x1c0 [ 630.517385][ T1356] do_syscall_64+0xcd/0x250 [ 630.519581][ T1356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.522259][ T1356] [ 630.523362][ T1356] Memory state around the buggy address: [ 630.525879][ T1356] ffff88801d438f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 630.529553][ T1356] ffff88801d438f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 630.533529][ T1356] >ffff88801d439000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 630.537357][ T1356] ^ [ 630.539597][ T1356] ffff88801d439080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 630.542849][ T1356] ffff88801d439100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 630.546977][ T1356] ================================================================== [ 630.551887][ T1356] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 630.557131][ T1356] CPU: 2 PID: 1356 Comm: aoe_tx0 Not tainted 6.10.0-rc5-syzkaller-00280-g27b31deb900d #0 [ 630.563615][ T1356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 630.570481][ T1356] Call Trace: [ 630.572693][ T1356] [ 630.574332][ T1356] dump_stack_lvl+0x3d/0x1f0 [ 630.576719][ T1356] panic+0x6f5/0x7a0 [ 630.578499][ T1356] ? __pfx_panic+0x10/0x10 [ 630.580551][ T1356] ? check_panic_on_warn+0x1f/0xb0 [ 630.582833][ T1356] check_panic_on_warn+0xab/0xb0 [ 630.585979][ T1356] end_report+0x117/0x180 [ 630.588694][ T1356] kasan_report+0xe9/0x110 [ 630.591171][ T1356] ? tty_write_room+0x7d/0x90 [ 630.593615][ T1356] ? tty_write_room+0x7d/0x90 [ 630.595917][ T1356] tty_write_room+0x7d/0x90 [ 630.598199][ T1356] handle_tx+0x151/0x630 [ 630.600524][ T1356] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 630.603375][ T1356] dev_hard_start_xmit+0x143/0x790 [ 630.605690][ T1356] __dev_queue_xmit+0x7ba/0x4130 [ 630.607934][ T1356] ? __pfx___lock_acquire+0x10/0x10 [ 630.610302][ T1356] ? lock_acquire+0x1b1/0x560 [ 630.612520][ T1356] ? __pfx___dev_queue_xmit+0x10/0x10 [ 630.615094][ T1356] ? find_held_lock+0x2d/0x110 [ 630.617423][ T1356] ? tx+0xa8/0x190 [ 630.619142][ T1356] ? __pfx_lock_release+0x10/0x10 [ 630.621401][ T1356] ? do_raw_spin_lock+0x12d/0x2c0 [ 630.623705][ T1356] tx+0xcc/0x190 [ 630.625410][ T1356] ? __pfx_tx+0x10/0x10 [ 630.627402][ T1356] kthread+0x1e7/0x3c0 [ 630.629289][ T1356] ? __pfx_kthread+0x10/0x10 [ 630.631379][ T1356] ? __pfx_default_wake_function+0x10/0x10 [ 630.633862][ T1356] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.636081][ T1356] ? __kthread_parkme+0x148/0x220 [ 630.638371][ T1356] ? __pfx_kthread+0x10/0x10 [ 630.640704][ T1356] kthread+0x2c1/0x3a0 [ 630.642597][ T1356] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.645063][ T1356] ? __pfx_kthread+0x10/0x10 [ 630.647393][ T1356] ret_from_fork+0x45/0x80 [ 630.649694][ T1356] ? __pfx_kthread+0x10/0x10 [ 630.652319][ T1356] ret_from_fork_asm+0x1a/0x30 [ 630.654696][ T1356] [ 630.656962][ T1356] Kernel Offset: disabled [ 630.659690][ T1356] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:07:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806b03fd00 RCX=ffffffff8181cac8 RDX=ffff888017eb0000 RSI=ffffffff8181caa3 RDI=0000000000000005 RBP=ffffc90000167d60 RSP=ffffc90000167c40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff8dbbc9b0 R12=1ffff9200002cf8c R13=0000000000000001 R14=0000000000000003 R15=ffffed100d607fa1 RIP=ffffffff8181caa5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31c0dff8 CR3=000000002d974000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff991c4700 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59889e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59889e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59889e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59889e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59889e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59889e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff285d62f RDX=ffff88801a9e2440 RSI=ffffffff813c3524 RDI=ffffffff8b8ff880 RBP=ffff88802fa61cc0 RSP=ffffc90000a877a0 R8 =0000000000000001 R9 =fffffbfff284d281 R10=ffffffff9426940f R11=0000000000000004 R12=0000000000000003 R13=0000000000000003 R14=ffff88806b13fa40 R15=ffffed1005f4c398 RIP=ffffffff813c3526 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcdb15589d3 CR3=000000003ddea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01010100ffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fd33f5 RDI=ffffffff94ddb3e0 RBP=ffffffff94ddb3a0 RSP=ffffc90005dbf598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000069 R14=ffffffff84fd3390 R15=0000000000000000 RIP=ffffffff84fd341f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2c04ce3a08 CR3=000000001f28e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81309313 ffffffff8100a0b3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0b3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efedd5e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efedd5e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efedd5e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efedd5e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efedd5e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efedd5e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81304cf5 ffffffff81304cf5 ffffffff8100a0f8 ffffffff8100a0cf ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff819f5fbf ffffffff819ea588 ffffffff00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81530e2c ffffffff81530e12 ffffffff8132f425 ffffffff8132f3f3 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000ea47ab RBX=0000000000000003 RCX=ffffffff8ae758d9 RDX=0000000000000000 RSI=ffffffff8b2caf00 RDI=ffffffff8b8ff880 RBP=ffffed1002fd9488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d666fdd R10=ffff88806b337eeb R11=0000000000000000 R12=0000000000000003 R13=ffff888017eca440 R14=ffffffff8fe44850 R15=0000000000000000 RIP=ffffffff8ae76ccf RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564755ae1300 CR3=000000003a932000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2b5126f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34e4de4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34e4de4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34e4de425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34e4de4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34e4de42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34e4de43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000f0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000