='./file1\x00', 0x0) [ 238.718491][ T39] audit: type=1400 audit(1656395843.163:152): avc: denied { map } for pid=4403 comm="syz-executor.2" path="/dev/nvme-fabrics" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 05:57:23 executing program 0: chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:23 executing program 2: syz_io_uring_setup(0x77a9, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0xc34, &(0x7f0000000100)={0x0, 0x12f0}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 238.719364][ T4407] loop1: detected capacity change from 0 to 270 [ 238.736644][ T39] audit: type=1400 audit(1656395843.163:153): avc: denied { execute } for pid=4403 comm="syz-executor.2" path="/dev/nvme-fabrics" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.762715][ T4407] FAT-fs (loop1): invalid media value (0x1b) [ 238.768911][ T4407] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:23 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x0, 0x3, 0xa, 0x5, 0x4, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}]}, &(0x7f0000000300)='GPL\x00', 0xe0, 0x1000, &(0x7f00000005c0)=""/4096, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x1f00, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = epoll_create1(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_wait(r2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0xffffff54) [ 238.807690][ T4417] loop0: detected capacity change from 0 to 270 [ 238.894676][ T3730] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 05:57:24 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a000005000000"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:24 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 239.621002][ T4423] loop1: detected capacity change from 0 to 270 [ 239.627794][ T4423] FAT-fs (loop1): invalid media value (0x1b) [ 239.630682][ T4424] loop0: detected capacity change from 0 to 270 [ 239.632113][ T4423] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:24 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:24 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 239.706634][ T4428] loop1: detected capacity change from 0 to 270 [ 239.717723][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 239.717949][ T4428] FAT-fs (loop1): invalid media value (0x1b) [ 239.736456][ T4428] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x0, 0x3, 0xa, 0x5, 0x4, 0x8}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}]}, &(0x7f0000000300)='GPL\x00', 0xe0, 0x1000, &(0x7f00000005c0)=""/4096, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x1f00, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = epoll_create1(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_wait(r2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0xffffff54) [ 239.746180][ T4430] loop0: detected capacity change from 0 to 270 05:57:24 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), 0x0, 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:24 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 239.808462][ T4434] loop1: detected capacity change from 0 to 270 [ 239.809067][ T3728] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.821660][ T3728] Buffer I/O error on dev loop1, logical block 0, async page read [ 239.823900][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 239.830651][ T3728] loop1: unable to read partition table [ 239.843713][ T4437] loop0: detected capacity change from 0 to 270 [ 239.845817][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.849524][ T4434] FAT-fs (loop1): bogus number of reserved sectors [ 239.854822][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.854891][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.854909][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.854943][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.854960][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.854992][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.855008][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.855040][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.855056][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.855096][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.855112][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.855151][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.855184][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.855199][ T3894] ldm_validate_partition_table(): Disk read failed. [ 239.860907][ T4434] FAT-fs (loop1): Can't find a valid FAT filesystem [ 239.973699][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 239.980284][ T3894] Dev loop0: unable to read RDB block 0 [ 239.985287][ T3894] loop0: unable to read partition table [ 239.989984][ T3894] loop0: partition table beyond EOD, truncated 05:57:24 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 240.021424][ T4443] loop1: detected capacity change from 0 to 270 [ 240.031158][ T4443] FAT-fs (loop1): bogus number of reserved sectors [ 240.035731][ T4443] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a000005000000"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:24 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), 0x0, 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:24 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 240.504880][ T4446] loop0: detected capacity change from 0 to 270 [ 240.504994][ T4447] loop1: detected capacity change from 0 to 270 [ 240.517115][ T4447] FAT-fs (loop1): bogus number of reserved sectors [ 240.521356][ T4447] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:25 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), 0x0, 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 240.597482][ T4451] loop0: detected capacity change from 0 to 270 05:57:25 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r0, 0x5405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:25 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:25 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 240.808193][ T4456] loop1: detected capacity change from 0 to 270 [ 240.816113][ T4456] FAT-fs (loop1): bogus number of reserved sectors 05:57:25 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 240.821580][ T4456] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f0000000100)=';') 05:57:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020d346"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:25 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:25 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 241.361636][ T4466] loop1: detected capacity change from 0 to 270 05:57:25 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 241.371591][ T4466] FAT-fs (loop1): bogus number of reserved sectors [ 241.371643][ T4466] FAT-fs (loop1): Can't find a valid FAT filesystem [ 241.399581][ T4469] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 05:57:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="3b66a558804bf33639c8c42cbe1f4275385fe79662d254aa68469a6870d43ee14d246cccccb77a7d94b37945d7f23f") r1 = syz_io_uring_complete(0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1c, 0x19, 0x1e9, 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f00000005c0)={0x60, 0x0, r4, {{0xfffffffffffffe00, 0x5, 0x8, 0x7ff, 0x6, 0x0, 0xfffffffe, 0x7}}}, 0x60) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x900, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000540)=0x7, 0x4) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000580)={0x80000001, 0x67, 0x5, 0x3ff, 0x66, "926dfc13e911c8a5858c78a84d39078619fff7", 0xbf6, 0x6}) [ 241.408993][ T4470] FAT-fs (loop0): bogus number of reserved sectors 05:57:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) [ 241.423124][ T4470] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:25 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 241.476283][ T4476] loop1: detected capacity change from 0 to 270 [ 241.486980][ T4476] FAT-fs (loop1): bogus number of reserved sectors [ 241.492242][ T4476] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:25 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 241.521974][ T4479] FAT-fs (loop0): bogus number of reserved sectors [ 241.527435][ T4479] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:26 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 241.596904][ T4481] FAT-fs (loop0): bogus number of reserved sectors [ 241.602492][ T4481] FAT-fs (loop0): Can't find a valid FAT filesystem [ 241.609496][ T4483] loop1: detected capacity change from 0 to 270 [ 241.610763][ T3894] ldm_validate_partition_table(): Disk read failed. [ 241.625837][ T3894] loop1: unable to read partition table [ 241.631557][ T4483] FAT-fs (loop1): bogus number of reserved sectors [ 241.636088][ T4483] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:26 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 241.678950][ T4485] FAT-fs (loop0): bogus number of reserved sectors [ 241.683743][ T4485] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 241.703838][ T4487] loop1: detected capacity change from 0 to 270 [ 241.705944][ T3728] ldm_validate_partition_table(): Disk read failed. [ 241.717784][ T3728] loop1: unable to read partition table [ 241.729337][ T4487] FAT-fs (loop1): bogus number of reserved sectors [ 241.735042][ T4487] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:26 executing program 2: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x8000000) 05:57:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:26 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:26 executing program 2: bpf$MAP_CREATE(0x7, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 242.299923][ T4492] FAT-fs (loop0): bogus number of reserved sectors [ 242.308057][ T4492] FAT-fs (loop0): Can't find a valid FAT filesystem [ 242.313299][ T4497] loop1: detected capacity change from 0 to 270 05:57:26 executing program 2: syz_emit_ethernet(0xe, &(0x7f00000000c0)={@link_local, @broadcast, @void, {@generic={0x88ca}}}, 0x0) [ 242.327281][ T4497] FAT-fs (loop1): bogus number of reserved sectors [ 242.338533][ T4497] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:26 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_complete(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) write$FUSE_STATFS(r1, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000540), 0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000580)={0x0, 0x67, 0x5, 0x3ff, 0x0, "926dfc13e911c8a5858c78a84d39078619fff7"}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffffffffffff) 05:57:26 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 242.385988][ T4503] FAT-fs (loop0): bogus number of reserved sectors [ 242.390422][ T4503] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400", 0xc}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 242.431981][ T4506] loop1: detected capacity change from 0 to 270 [ 242.435519][ T3894] ldm_validate_partition_table(): Disk read failed. [ 242.442735][ T3894] loop1: unable to read partition table [ 242.450609][ T4506] FAT-fs (loop1): bogus number of reserved sectors [ 242.455567][ T4506] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:27 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400", 0xc}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 243.148811][ T4509] loop0: detected capacity change from 0 to 270 [ 243.151558][ T4510] loop1: detected capacity change from 0 to 270 [ 243.157607][ T4509] FAT-fs (loop0): bogus number of reserved sectors [ 243.165997][ T4509] FAT-fs (loop0): Can't find a valid FAT filesystem [ 243.171690][ T4510] FAT-fs (loop1): bogus number of reserved sectors [ 243.176448][ T4510] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:27 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_complete(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) write$FUSE_STATFS(r1, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000540), 0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000580)={0x0, 0x67, 0x5, 0x3ff, 0x0, "926dfc13e911c8a5858c78a84d39078619fff7"}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffffffffffff) 05:57:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400", 0xc}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:27 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 243.248830][ T4516] loop1: detected capacity change from 0 to 270 [ 243.251283][ T3137] ldm_validate_partition_table(): Disk read failed. [ 243.254310][ T4518] loop0: detected capacity change from 0 to 270 [ 243.260046][ T3137] loop1: unable to read partition table [ 243.269861][ T4518] FAT-fs (loop0): bogus number of reserved sectors [ 243.274483][ T4518] FAT-fs (loop0): Can't find a valid FAT filesystem [ 243.278754][ T4516] FAT-fs (loop1): bogus number of reserved sectors [ 243.287525][ T4516] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240", 0x12}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 243.317673][ T4521] loop1: detected capacity change from 0 to 270 [ 243.320090][ T3137] ldm_validate_partition_table(): Disk read failed. 05:57:27 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 243.333101][ T3137] Dev loop1: unable to read RDB block 0 [ 243.338995][ T3137] loop1: unable to read partition table [ 243.345384][ T4523] loop0: detected capacity change from 0 to 270 [ 243.348347][ T4521] FAT-fs (loop1): invalid media value (0x00) [ 243.356333][ T4521] FAT-fs (loop1): Can't find a valid FAT filesystem [ 243.356834][ T4523] FAT-fs (loop0): bogus number of reserved sectors [ 243.369591][ T4523] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:28 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{0x0}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:28 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240", 0x12}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 244.039588][ T4527] loop0: detected capacity change from 0 to 270 [ 244.042283][ T4528] loop1: detected capacity change from 0 to 270 [ 244.053164][ T4527] FAT-fs (loop0): bogus number of reserved sectors [ 244.053185][ T4527] FAT-fs (loop0): Can't find a valid FAT filesystem [ 244.053798][ T4528] FAT-fs (loop1): invalid media value (0x00) [ 244.066586][ T4528] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:28 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_complete(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) write$FUSE_STATFS(r1, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000540), 0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000580)={0x0, 0x67, 0x5, 0x3ff, 0x0, "926dfc13e911c8a5858c78a84d39078619fff7"}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffffffffffff) 05:57:28 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{0x0}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:28 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240", 0x12}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 244.136839][ T4533] loop0: detected capacity change from 0 to 270 [ 244.148357][ T4536] loop1: detected capacity change from 0 to 270 [ 244.149218][ T3894] blk_print_req_error: 54 callbacks suppressed [ 244.149230][ T3894] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.149399][ T4533] FAT-fs (loop0): bogus number of reserved sectors 05:57:28 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{0x0}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 244.149414][ T4533] FAT-fs (loop0): Can't find a valid FAT filesystem [ 244.176470][ T3894] loop1: unable to read partition table [ 244.180051][ T4538] loop0: detected capacity change from 0 to 270 [ 244.183550][ T3728] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.191032][ T3728] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.193233][ T4536] FAT-fs (loop1): invalid media value (0x00) [ 244.197314][ T3728] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.201810][ T4536] FAT-fs (loop1): Can't find a valid FAT filesystem [ 244.215063][ T3728] loop0: unable to read partition table [ 244.221753][ T4538] FAT-fs (loop0): bogus number of reserved sectors [ 244.226577][ T4538] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:28 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 244.275199][ T4541] loop0: detected capacity change from 0 to 270 [ 244.285088][ T4541] FAT-fs (loop0): bogus number of reserved sectors [ 244.290059][ T4541] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:29 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004", 0x15}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:29 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 244.888465][ T4544] loop0: detected capacity change from 0 to 270 [ 244.891430][ T4545] loop1: detected capacity change from 0 to 270 [ 244.901098][ T4544] FAT-fs (loop0): bogus number of reserved sectors [ 244.906043][ T4544] FAT-fs (loop0): Can't find a valid FAT filesystem [ 244.914545][ T4545] FAT-fs (loop1): invalid media value (0x00) [ 244.921583][ T4545] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b3b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7ff, 0x0, 0x0, 0xb9a, 0x0, "bc804a9c9be29d9d"}) 05:57:29 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004", 0x15}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:29 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7ff, 0x0, 0x0, 0xb9a, 0x0, "bc804a9c9be29d9d"}) [ 245.011078][ T4555] loop0: detected capacity change from 0 to 270 [ 245.019765][ T4557] loop1: detected capacity change from 0 to 270 [ 245.021267][ T3137] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.031536][ T4555] FAT-fs (loop0): bogus number of reserved sectors [ 245.032032][ T3137] buffer_io_error: 55 callbacks suppressed [ 245.032043][ T3137] Buffer I/O error on dev loop1, logical block 0, async page read [ 245.038787][ T4555] FAT-fs (loop0): Can't find a valid FAT filesystem [ 245.041021][ T3137] loop1: unable to read partition table [ 245.056684][ T4557] FAT-fs (loop1): invalid media value (0x00) [ 245.064286][ T4557] FAT-fs (loop1): Can't find a valid FAT filesystem [ 245.115502][ T3894] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.122046][ T3894] Buffer I/O error on dev loop1, logical block 1, async page read [ 245.127945][ T3894] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.139518][ T3894] Buffer I/O error on dev loop1, logical block 2, async page read [ 245.144999][ T3894] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.150523][ T3894] Buffer I/O error on dev loop1, logical block 3, async page read [ 245.158464][ T3894] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.164441][ T3894] Buffer I/O error on dev loop1, logical block 4, async page read [ 245.169573][ T3894] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.176850][ T3894] Buffer I/O error on dev loop1, logical block 5, async page read [ 245.181757][ T3894] Buffer I/O error on dev loop1, logical block 6, async page read [ 245.186764][ T3894] Buffer I/O error on dev loop1, logical block 7, async page read 05:57:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f0000000100)) 05:57:30 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400", 0xc}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:30 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004", 0x15}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 245.749384][ T4561] loop1: detected capacity change from 0 to 270 [ 245.756942][ T4561] FAT-fs (loop1): invalid media value (0x00) [ 245.758817][ T4562] loop0: detected capacity change from 0 to 270 [ 245.761152][ T4561] FAT-fs (loop1): Can't find a valid FAT filesystem [ 245.774029][ T4562] FAT-fs (loop0): bogus number of reserved sectors [ 245.780170][ T4562] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:30 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "78f30ffcc656ec2b3aadc7851a7cd5e7e0f28c"}) 05:57:30 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f8", 0x16}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b66, &(0x7f0000000100)) [ 245.812792][ T4569] loop1: detected capacity change from 0 to 270 [ 245.814734][ T3894] Buffer I/O error on dev loop1, logical block 0, async page read [ 245.832743][ T3894] loop1: unable to read partition table 05:57:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 245.840840][ T4569] FAT-fs (loop1): bogus number of FAT sectors [ 245.845748][ T4569] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020d3"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:31 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f8", 0x16}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:31 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400", 0xc}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:31 executing program 2: socketpair(0x10, 0x3, 0x100, &(0x7f00000001c0)) [ 246.626994][ T4578] loop1: detected capacity change from 0 to 270 [ 246.629408][ T4579] loop0: detected capacity change from 0 to 270 05:57:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc086, 0x0, "acd3283d61bd974ca8ad8b09595309d0279fd7"}) [ 246.639315][ T4581] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 246.646143][ T4578] FAT-fs (loop1): bogus number of FAT sectors [ 246.650222][ T4578] FAT-fs (loop1): Can't find a valid FAT filesystem [ 246.650691][ T4579] FAT-fs (loop0): bogus number of reserved sectors [ 246.668676][ T4579] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5434, 0x0) 05:57:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x40086602, &(0x7f0000000100)) [ 246.720793][ T39] audit: type=1400 audit(1656395851.163:154): avc: denied { setattr } for pid=4588 comm="syz-executor.2" path="/dev/tty24" dev="devtmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 05:57:31 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f00000000c0), 0x0) 05:57:31 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f8", 0x16}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:31 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400", 0xc}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:31 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x107000, 0x0) [ 246.787457][ T4596] loop1: detected capacity change from 0 to 270 [ 246.788125][ T4597] loop0: detected capacity change from 0 to 270 [ 246.802253][ T4597] FAT-fs (loop0): bogus number of reserved sectors [ 246.812549][ T4597] FAT-fs (loop0): Can't find a valid FAT filesystem [ 246.820034][ T4596] FAT-fs (loop1): bogus number of FAT sectors [ 246.825974][ T4596] FAT-fs (loop1): Can't find a valid FAT filesystem 05:57:31 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x540a, 0x0) [ 246.879874][ T3894] Buffer I/O error on dev loop0, logical block 1, async page read 05:57:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:32 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:32 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240", 0x12}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 247.557169][ T4606] loop1: detected capacity change from 0 to 270 05:57:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f0000000100)='; ') 05:57:32 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 247.581326][ T4605] loop0: detected capacity change from 0 to 270 [ 247.595985][ T4605] FAT-fs (loop0): invalid media value (0x00) [ 247.596016][ T4605] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000005a80)=ANY=[@ANYBLOB='errors=continue']) [ 247.646949][ T4613] loop1: detected capacity change from 0 to 270 [ 247.649131][ T3894] ldm_validate_partition_table(): Disk read failed. 05:57:32 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240", 0x12}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 247.671509][ T3894] loop1: unable to read partition table [ 247.679685][ T4615] FAT-fs (loop2): bogus number of reserved sectors [ 247.685088][ T4615] FAT-fs (loop2): Can't find a valid FAT filesystem [ 247.701865][ T4617] loop0: detected capacity change from 0 to 270 [ 247.711812][ T4617] FAT-fs (loop0): invalid media value (0x00) [ 247.718058][ T4617] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:32 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:32 executing program 2: connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x3edc, &(0x7f0000000140)={0x0, 0x5941}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x23cb, &(0x7f0000000080)={0x0, 0x863d, 0x0, 0x1, 0xb4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 05:57:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020"]) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 05:57:32 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240", 0x12}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 248.435793][ T4622] loop1: detected capacity change from 0 to 270 [ 248.436184][ T4623] loop0: detected capacity change from 0 to 270 [ 248.451301][ T4623] FAT-fs (loop0): invalid media value (0x00) [ 248.456767][ T4623] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:32 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:32 executing program 2: r0 = mq_open(&(0x7f0000000040)=')\\#{\x00', 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 05:57:32 executing program 2: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f00000001c0), 0x2cb02, 0x0) 05:57:32 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004", 0x15}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 248.526279][ T4631] loop1: detected capacity change from 0 to 270 [ 248.541344][ T4633] loop0: detected capacity change from 0 to 270 [ 248.545913][ T3894] ldm_validate_partition_table(): Disk read failed. [ 248.560202][ T3894] loop0: unable to read partition table [ 248.566617][ T4633] FAT-fs (loop0): invalid media value (0x00) [ 248.576588][ T4633] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020d3"]) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) 05:57:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b47, &(0x7f0000000100)='; ') 05:57:33 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:33 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004", 0x15}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 249.323248][ T4637] loop1: detected capacity change from 0 to 270 [ 249.328374][ T4638] loop0: detected capacity change from 0 to 270 [ 249.333127][ T4640] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 249.338522][ T4638] FAT-fs (loop0): invalid media value (0x00) 05:57:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020d3"]) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) 05:57:33 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000001ec0)={0x2c, 0x0, &(0x7f0000001d00)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000ac0)={[{0x3d, 0x4e00, "b1582b369143922e3f25848d4689647a569afc9927d9979041e554d1ee72808cded115356520fb830480a05e78d76560df8504fec1d4466dd928209080"}]}) [ 249.350338][ T4638] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:33 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 249.358208][ T4643] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 05:57:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023ff160a00000500000010000020d3"]) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) [ 249.395740][ T4648] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 249.395848][ T4649] loop1: detected capacity change from 0 to 270 05:57:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x3edc, &(0x7f0000000140)={0x0, 0x5941}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 05:57:33 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004", 0x15}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 249.445648][ T4652] loop0: detected capacity change from 0 to 270 [ 249.450164][ T39] audit: type=1400 audit(1656395853.893:155): avc: denied { read } for pid=4651 comm="syz-executor.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 05:57:33 executing program 1: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) [ 249.450814][ T4653] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 249.464854][ T4652] FAT-fs (loop0): invalid media value (0x00) [ 249.465492][ T39] audit: type=1400 audit(1656395853.893:156): avc: denied { open } for pid=4651 comm="syz-executor.3" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.465520][ T39] audit: type=1400 audit(1656395853.893:157): avc: denied { ioctl } for pid=4651 comm="syz-executor.3" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.516019][ T4652] FAT-fs (loop0): Can't find a valid FAT filesystem [ 249.537173][ T4658] loop1: detected capacity change from 0 to 270 [ 249.540773][ T3137] blk_print_req_error: 28 callbacks suppressed [ 249.540786][ T3137] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 05:57:33 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 249.554353][ T3137] loop1: unable to read partition table [ 249.560959][ T4660] loop0: detected capacity change from 0 to 270 05:57:34 executing program 1: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) [ 249.567545][ T4660] FAT-fs (loop0): bogus number of FAT sectors [ 249.572129][ T4660] FAT-fs (loop0): Can't find a valid FAT filesystem [ 249.589079][ T4662] loop1: detected capacity change from 0 to 270 [ 249.625612][ T3728] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.636706][ T3728] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.644356][ T3728] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.651570][ T3728] I/O error, dev loop0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.658928][ T3728] I/O error, dev loop0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.663069][ T173] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 249.666768][ T3728] I/O error, dev loop0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.679347][ T3728] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.913062][ T173] usb 7-1: Using ep0 maxpacket: 16 [ 250.063284][ T173] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.070339][ T173] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.079289][ T173] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.089406][ T173] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.100072][ T173] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.194087][ T173] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.201644][ T173] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.208047][ T173] usb 7-1: Manufacturer: syz [ 250.220463][ T173] usb 7-1: config 0 descriptor?? [ 250.543008][ T173] rc_core: IR keymap rc-hauppauge not found [ 250.546934][ T173] Registered IR keymap rc-empty [ 250.552766][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.582986][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.629938][ T173] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 250.641527][ T173] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 250.657258][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.683064][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.713100][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.755505][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.794092][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.823325][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.863166][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.893567][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.923068][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.953125][ T173] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 250.985905][ T173] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 250.992540][ T173] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 251.006793][ T173] usb 7-1: USB disconnect, device number 2 05:57:35 executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000001ec0)={0x2c, 0x0, &(0x7f0000001d00)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000ac0)={[{0x3d, 0x4e00, "b1582b369143922e3f25848d4689647a569afc9927d9979041e554d1ee72808cded115356520fb830480a05e78d76560df8504fec1d4466dd928209080"}]}) 05:57:35 executing program 1: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) 05:57:35 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "f91465d890217fea45754ab07e7e6ea248adbf"}) 05:57:35 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 251.513421][ T4670] loop0: detected capacity change from 0 to 270 05:57:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) [ 251.515081][ T4669] loop1: detected capacity change from 0 to 270 05:57:35 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, 0x0, 0x0) [ 251.543220][ T4670] FAT-fs (loop0): bogus number of FAT sectors [ 251.548128][ T4670] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b64, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 251.560068][ T4676] loop1: detected capacity change from 0 to 270 05:57:36 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, 0x0, 0x0) [ 251.599437][ T4680] loop1: detected capacity change from 0 to 270 [ 251.813129][ T51] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 252.063047][ T51] usb 7-1: Using ep0 maxpacket: 16 [ 252.193183][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.199987][ T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.208432][ T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.214776][ T51] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 252.221247][ T51] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.303760][ T51] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 252.309552][ T51] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 252.314892][ T51] usb 7-1: Manufacturer: syz [ 252.319184][ T51] usb 7-1: config 0 descriptor?? [ 252.623005][ T51] rc_core: IR keymap rc-hauppauge not found [ 252.626855][ T51] Registered IR keymap rc-empty [ 252.631086][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.663031][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.694190][ T51] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 252.704163][ T51] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 252.714698][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.745118][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.783171][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.812997][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.843171][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.875134][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.903100][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.933208][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.963072][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 252.993191][ T51] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 253.024427][ T51] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 253.029414][ T51] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 253.064275][ T3787] usb 7-1: USB disconnect, device number 3 05:57:38 executing program 2: socketpair(0x10, 0x3, 0x0, &(0x7f00000001c0)) 05:57:38 executing program 3: r0 = syz_io_uring_setup(0x2f54, &(0x7f0000000140), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x10000000) 05:57:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:38 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '866'}}]}) mkdirat(r0, 0x0, 0x0) [ 253.581804][ T4687] loop0: detected capacity change from 0 to 270 [ 253.588765][ T4686] loop1: detected capacity change from 0 to 270 [ 253.589227][ T4687] FAT-fs (loop0): bogus number of FAT sectors 05:57:38 executing program 3: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x22d914258142a411, r0, 0x10000000) [ 253.598300][ T4687] FAT-fs (loop0): Can't find a valid FAT filesystem 05:57:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5608, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:38 executing program 2: syz_io_uring_setup(0x4c0e, &(0x7f0000000180), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3edc, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x18c7, &(0x7f0000000300)={0x0, 0x3a3f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000100), &(0x7f0000000380)) 05:57:38 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 05:57:38 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x80045432, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:38 executing program 3: select(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x0, 0x2710}) 05:57:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, "1cdda24ce325d8154edec338cf78c2405c1ccc"}) 05:57:38 executing program 1: syz_io_uring_setup(0x3edc, &(0x7f0000000140), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x23cb, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 253.686863][ T4704] loop0: detected capacity change from 0 to 270 05:57:38 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002180), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}) 05:57:38 executing program 2: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x7, &(0x7f0000001640)=[{&(0x7f0000000140)="54129b7ea92b02822fc370dc3b5a4a864e4688f284d69464123d5260b6d592f6a0d1ad456d204e9119d171550d070fa7054561d82bf89c1fbcf8af42391a1c90f9c16b9234b6f5379d6d6d644d6483e4fc7fd72374a6f99625d4b0ef1e0ae6059de6eb67c0606099564b84bd5f17a65bc63d26cd1dc6c67b7efca89366d360f3ef410d891b6915b9a6f27f387165099b6f3dde4a7b7e8bdebb44e24e893002f96e5771e14d35ad6cd1a7bcba63be3664526eabf362ec1481beab25dc351056c7388cdf706ba34583ba202103a3223d79e292", 0xd2, 0x3f}, {&(0x7f0000000240)="801d0370edd53537f53cb39b1f73d37a8932d7caaad4d2345a34fd9a3dd7798c78ee21003392c69ee92fd9a582f98e9c2b10533019702a0e73ec833ca4a1a8ae003c35108735f0ce4e34f0bdc81713ecd89afb49060cfa3188cb7a2b751eb950a73ea9078b19c3947a86356bddea0ac00e4ad8b088a9e7798cf93df8", 0x7c, 0xffff}, {&(0x7f0000000340)="0fb87d4d97101eaa486a1ce2f0021a9dac51509be02595eaa064b54ec7a6a1f0a4fd23df5ff5db257d9371eab9b963c987fcabe07f7a452945d3b5871ac6d631946e18aedddbe0edf3", 0x49, 0x28fd8c22}, {&(0x7f00000003c0)="676a8c5a1f93068252f2b04bedd5e1a81d9945a65d55d84b1a4ba2f6c77b55ca6ee8703325f386526792cc1dc988ab049b446622b7fcc028ac9fceee6d65de6eb8996ba469e2cb6eafd437f835a266b278ee88fa3c7a587d1321c47a27cc016b758d26df9d0d0b4545bf3b76202116337bff9c481af00b6a2b22dc63450b50a2ff096722864c988ed264f019af0036a1000049a99613864bcad06775409d755d9a377cdc5227f2770d9afeab09c2111bb1a4f3d483e5fa", 0xb7, 0x9}, {0x0, 0x0, 0xe096}, {&(0x7f0000000540)="c902242e581a2e0908ad1508ebf55005cd864fd1aabf1bf48c958513d93a5cdd36f7ba657d611b1f9bb589e2be1a6514c40189c1a777e58d1d756ffb5537ba37f024cfa6cda0ac4edcedc7db74027049a00330437ca625c508eea850a2b020556f", 0x61, 0x9}, {&(0x7f00000005c0)="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", 0xa41, 0xffffff80}], 0x800000, &(0x7f00000016c0)={[{'[+'}, {}, {'{'}, {'-!$%%'}, {']\''}, {}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '-}.:'}}, {@euid_lt}, {@permit_directio}, {@subj_user={'subj_user', 0x3d, '+[[^-'}}, {@dont_hash}, {@uid_lt}]}) 05:57:38 executing program 3: prctl$PR_SET_FPEXC(0x34, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x0, 0x20}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x5, 0xff, 0x7}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "c3afe46f3b7b11183b5452b4265570fc"}]}, 0x4, [{0x2, &(0x7f0000000240)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x0, 0x0}]}) 05:57:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:38 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_wait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0x8001) ppoll(&(0x7f0000000000)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) [ 253.768428][ T4718] loop0: detected capacity change from 0 to 270 05:57:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, 0x0) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 253.834326][ T3894] I/O error, dev loop0, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 253.851820][ T4722] loop0: detected capacity change from 0 to 270 [ 253.853322][ T3894] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.873759][ T3894] buffer_io_error: 30 callbacks suppressed [ 253.873771][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read [ 253.883943][ T3894] loop0: unable to read partition table 05:57:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[]) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 253.911223][ T4712] loop2: detected capacity change from 0 to 44428 [ 253.919685][ T4725] loop0: detected capacity change from 0 to 270 [ 253.920038][ T3894] Buffer I/O error on dev loop0, logical block 0, async page read 05:57:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5425, 0x0) [ 253.939528][ T3894] loop0: unable to read partition table 05:57:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[]) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 254.002926][ T3787] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 254.024080][ T4727] loop0: detected capacity change from 0 to 270 05:57:38 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[]) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 254.085837][ T4731] loop0: detected capacity change from 0 to 270 [ 254.353694][ T3787] usb 8-1: not running at top speed; connect to a high speed hub [ 254.463051][ T3787] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 254.533015][ T3787] usb 8-1: language id specifier not provided by device, defaulting to English [ 255.113916][ T3787] usb 8-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 255.122003][ T3787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.132257][ T3787] usb 8-1: Product: Ќ [ 255.414976][ T3787] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 255.421941][ T3787] usb 8-1: USB disconnect, device number 2 [ 255.896931][ T4734] loop0: detected capacity change from 0 to 270 05:57:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b48, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5457, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:40 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_wait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0x8001) ppoll(&(0x7f0000000000)=[{r2, 0x4b57, 0x64}], 0x1, 0x0, 0x0, 0x0) 05:57:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 05:57:40 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:40 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) [ 255.954767][ T4745] loop0: detected capacity change from 0 to 270 05:57:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4bfb, &(0x7f0000000100)=';') 05:57:40 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) socket$nl_route(0x10, 0x3, 0x0) pwritev(r0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000600)='a', 0x1}, {0x0}, {&(0x7f0000000880)="b39db1", 0x3}, {&(0x7f00000008c0)="218c41beac8d1345442a6c3a24c9961b84fa943515ea8664ba25a2005a50a12cbe707492d443cd42865ded98b300d8240354e0ca30eee6798d5b37af1f0327be064c4ec80052ec2ac79d09e81d0c6e9b0455cd3fb68231b4a6f0f8967460d39b564c38ebec5408834a9a9f29f6c1272e22b6136ff63e6b591d21b04f59e06fc90daa8eb013a6ea73fb41213a4bf36e89aa5ca76b62ccadf4ee492c03ec7ae9b7172821906f94767a45f5fd40d7c7a382fe66582ed6273a", 0xb7}], 0x5, 0x0, 0x0) [ 255.995364][ T4750] loop0: detected capacity change from 0 to 270 05:57:40 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iochar']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 256.008521][ T39] audit: type=1400 audit(1656395860.453:158): avc: denied { read } for pid=3355 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 256.028215][ T4742] mkiss: ax0: crc mode is auto. [ 256.045553][ T4755] loop0: detected capacity change from 0 to 270 [ 256.049826][ T3730] blk_print_req_error: 2 callbacks suppressed [ 256.049837][ T3730] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.060497][ T3730] Buffer I/O error on dev loop0, logical block 0, async page read [ 256.080613][ T3730] loop0: unable to read partition table [ 256.084524][ T4755] FAT-fs (loop0): Unrecognized mount option "iochar" or missing value [ 256.414718][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.418713][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 05:57:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "ba9225a14409a474312bc7bed81697ddf0f4b9"}) 05:57:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 05:57:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, "df27dfadf0d42d2f"}) 05:57:41 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iochar']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 256.900424][ T4775] loop0: detected capacity change from 0 to 270 [ 256.906636][ T4775] FAT-fs (loop0): Unrecognized mount option "iochar" or missing value 05:57:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) [ 256.935969][ T4776] mkiss: ax0: crc mode is auto. 05:57:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5419, 0x0) 05:57:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5417, 0x0) 05:57:41 executing program 1: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) 05:57:41 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iochar']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5419, 0x0) [ 256.983357][ T4788] loop0: detected capacity change from 0 to 270 [ 256.989020][ T4788] FAT-fs (loop0): Unrecognized mount option "iochar" or missing value 05:57:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 05:57:41 executing program 3: r0 = syz_io_uring_setup(0x6e5a, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000d, 0x13, r0, 0x10000000) syz_io_uring_setup(0x6ce3, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240)) 05:57:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5432, 0x0) [ 257.047640][ T39] audit: type=1400 audit(1656395861.493:159): avc: denied { execute } for pid=4794 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 05:57:41 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x802c542a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:41 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=defau']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 257.088328][ T4804] loop0: detected capacity change from 0 to 270 05:57:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541a, 0x0) [ 257.117172][ T4799] mkiss: ax0: crc mode is auto. 05:57:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b2f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 257.128324][ T4804] FAT-fs (loop0): IO charset defau not found 05:57:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 05:57:41 executing program 3: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x10000000) 05:57:41 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=defau']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="24e01527420e404ca4c20eb011a73eaae8f92e3fd8bb1c4230ef1ba4c0f7b53fa070a3b3149f21eb956ff188d188c903e5bd35090000009912f37b95f3f0c87a1066aea6581df52adba0b30700ffffffffff7f1b033502948350f33391bc5bde8870c999b9d5e28f55ec29f5e04d4dac05d20f3bba0707cd2346a1e7385075a28cb69e521815f94c019eb63704994df0f3c06821a354bc0d68328a6867d8871c3f29d3d88577696b17a20693d1dee1a433a16651403b683dc43b1a2bfab09628fe9f0fd6b000000000000000000000000000a3d13b1c17649623b7333994e17eef44d65ced9695bb93b243b51492c12b0d7dc5b44c57f21c770023d948ac9504ec36ac58505bb4647c0000e3fb2077b10e61321bb8411e08f16e114c361523b1514a7511897a3f1a4b942887a0a8012a50d33533fffe") [ 257.221772][ T4818] loop0: detected capacity change from 0 to 270 05:57:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5457, 0x0) [ 257.247672][ T4818] FAT-fs (loop0): IO charset defau not found 05:57:41 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=defau']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 257.280546][ T4821] mkiss: ax0: crc mode is auto. 05:57:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5457, 0x0) 05:57:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000140)="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"}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)) [ 257.295884][ T4829] loop0: detected capacity change from 0 to 270 [ 257.328747][ T4829] FAT-fs (loop0): IO charset defau not found 05:57:41 executing program 1: syz_io_uring_setup(0x55b8, &(0x7f0000000040)={0x0, 0xfffffffc, 0x8}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 05:57:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x9b47, 0x0, 0x0, 0xfffffffa, 0x0, "921ab1bab866fb7cbd8c5b009e5da69bc70d2d"}) 05:57:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:41 executing program 1: r0 = syz_io_uring_setup(0x2d51, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000d, 0x13, r0, 0x10000000) syz_io_uring_setup(0x2ff9, &(0x7f0000000140)={0x0, 0xc11b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) 05:57:41 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,f']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="0e20") [ 257.467147][ T4848] mkiss: ax0: crc mode is auto. [ 257.475888][ T4853] loop0: detected capacity change from 0 to 270 05:57:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="0e20") 05:57:41 executing program 1: syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1350, &(0x7f0000000140), &(0x7f0000800000/0x800000)=nil, &(0x7f000082b000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) [ 257.512011][ T4853] FAT-fs (loop0): Unrecognized mount option "f" or missing value 05:57:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @local}, {0x0, @multicast}, 0x0, {0x2, 0x0, @multicast1}, 'bridge_slave_1\x00'}) 05:57:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="0e20") 05:57:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x5) 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="0e20") 05:57:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5415, 0x0) 05:57:42 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,f']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b2f, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 257.588327][ T4868] loop0: detected capacity change from 0 to 270 [ 257.589811][ T3137] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.598693][ T3137] Buffer I/O error on dev loop0, logical block 0, async page read [ 257.599238][ T3137] loop0: unable to read partition table 05:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x5) [ 257.607602][ T39] audit: type=1400 audit(1656395862.043:160): avc: denied { rename } for pid=3119 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.623775][ T39] audit: type=1400 audit(1656395862.043:161): avc: denied { unlink } for pid=3119 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.623995][ T39] audit: type=1400 audit(1656395862.043:162): avc: denied { create } for pid=3119 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.626107][ T4868] FAT-fs (loop0): Unrecognized mount option "f" or missing value 05:57:42 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="0e20") 05:57:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b67, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:42 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,f']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x5) 05:57:42 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="0e20") [ 257.715427][ T4881] loop0: detected capacity change from 0 to 270 [ 257.723739][ T4881] FAT-fs (loop0): Unrecognized mount option "f" or missing value 05:57:42 executing program 1: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x7264, &(0x7f0000000140)={0x0, 0xc72b, 0x3c, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 05:57:42 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="0e20") 05:57:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:42 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="0e20") 05:57:42 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flu']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:42 executing program 1: write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000004380)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0xee00}}, {0x0, 0x0, 0x3, 0x0, '!+['}}]}, 0xb0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x8) [ 257.824928][ T4894] loop0: detected capacity change from 0 to 270 05:57:42 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="0e20") [ 257.836555][ T4894] FAT-fs (loop0): Unrecognized mount option "flu" or missing value 05:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:42 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="0e20") 05:57:42 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flu']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) [ 257.941110][ T4907] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 257.947712][ T4910] loop0: detected capacity change from 0 to 270 [ 257.955904][ T4910] FAT-fs (loop0): Unrecognized mount option "flu" or missing value 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 05:57:42 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flu']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x12001, 0x0, 0x0) 05:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) [ 258.082762][ T39] audit: type=1400 audit(1656395862.523:163): avc: denied { read } for pid=4914 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.084808][ T4921] loop0: detected capacity change from 0 to 270 [ 258.097206][ T3137] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 05:57:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)) 05:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 258.121823][ T3137] Buffer I/O error on dev loop0, logical block 0, async page read [ 258.128640][ T3137] loop0: unable to read partition table [ 258.134552][ T4921] FAT-fs (loop0): Unrecognized mount option "flu" or missing value 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)) 05:57:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 258.156345][ T4926] mkiss: ax0: crc mode is auto. 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)) 05:57:42 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flus']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:42 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000003ac0), 0xffffffffffffffff) 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="0e") [ 258.222568][ T4939] loop0: detected capacity change from 0 to 270 05:57:42 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5412, 0x0) [ 258.238147][ T4939] FAT-fs (loop0): Unrecognized mount option "flus" or missing value 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="0e") 05:57:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b71, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:42 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flus']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 258.316553][ T4948] loop0: detected capacity change from 0 to 270 05:57:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b69, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="0e") [ 258.339624][ T4948] FAT-fs (loop0): Unrecognized mount option "flus" or missing value [ 258.349286][ T4946] mkiss: ax0: crc mode is auto. 05:57:42 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usbip_server_init(0x5) 05:57:42 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flus']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) [ 258.409450][ T39] audit: type=1400 audit(1656395862.853:164): avc: denied { create } for pid=4955 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b44, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 258.441138][ T4963] loop0: detected capacity change from 0 to 270 [ 258.446261][ T3137] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 258.449195][ T4962] mkiss: ax0: crc mode is auto. [ 258.452167][ T4956] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 258.453020][ T3137] Buffer I/O error on dev loop0, logical block 0, async page read [ 258.464054][ T3137] loop0: unable to read partition table [ 258.464266][ T4956] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 258.468434][ T4963] FAT-fs (loop0): Unrecognized mount option "flus" or missing value [ 258.481878][ T4956] vhci_hcd vhci_hcd.0: Device attached 05:57:42 executing program 3: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000240), 0x80801, 0x0) write$damon_schemes(r0, &(0x7f0000000280), 0x66) [ 258.498990][ T4959] vhci_hcd: connection closed [ 258.502305][ T10] vhci_hcd: stop threads [ 258.513403][ T10] vhci_hcd: release socket [ 258.516483][ T10] vhci_hcd: disconnect device 05:57:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") 05:57:43 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 258.569015][ T4973] loop0: detected capacity change from 0 to 270 05:57:43 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5) 05:57:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5432, 0x0) 05:57:43 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usbip_server_init(0x5) 05:57:43 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 259.014996][ T4979] loop0: detected capacity change from 0 to 270 05:57:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540a, 0x0) 05:57:43 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5) [ 259.033386][ T4981] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 259.038041][ T4981] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 259.038280][ T4981] vhci_hcd vhci_hcd.0: Device attached 05:57:43 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:43 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5) 05:57:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r0, 0x5405, 0x0) [ 259.044336][ T4984] vhci_hcd: connection closed [ 259.068053][ T4041] vhci_hcd: stop threads 05:57:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 259.088402][ T4041] vhci_hcd: release socket [ 259.091929][ T4041] vhci_hcd: disconnect device [ 259.102078][ T4995] loop0: detected capacity change from 0 to 270 [ 259.106837][ T4836] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.106861][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.106910][ T4836] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.106927][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.106966][ T4836] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.106982][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.107014][ T4836] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.107030][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.107061][ T4836] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.107092][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.107132][ T4836] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.107148][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.107187][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.107221][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.107236][ T4836] ldm_validate_partition_table(): Disk read failed. [ 259.107265][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.107298][ T4836] Buffer I/O error on dev loop0, logical block 0, async page read [ 259.107361][ T4836] Dev loop0: unable to read RDB block 0 [ 259.107520][ T4836] loop0: unable to read partition table 05:57:44 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 05:57:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r0, 0x5405, 0x0) 05:57:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:44 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 259.563256][ T5001] loop0: detected capacity change from 0 to 270 05:57:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:44 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x40, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9d5, 0x0, 0x0, 0x2e}, {0x6}, [@acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x0, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1f, 0x7f}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x6f, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x60, 0x0, 0x2, {0x2}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:57:44 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000000c0)={@link_local, @broadcast, @void}, 0x0) 05:57:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 259.620535][ T5012] mkiss: ax0: crc mode is auto. 05:57:44 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @dev}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 05:57:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x540d, 0x0) 05:57:44 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 259.722103][ T5018] loop0: detected capacity change from 0 to 270 05:57:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5417, 0x0) [ 259.749308][ T5022] mkiss: ax0: crc mode is auto. [ 259.885228][ T3754] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 260.132958][ T3754] usb 6-1: Using ep0 maxpacket: 32 [ 260.313050][ T3754] usb 6-1: unable to get BOS descriptor or descriptor too short [ 260.393212][ T3754] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.400664][ T3754] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.409809][ T3754] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 260.416245][ T3754] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 260.653213][ T3754] usb 6-1: language id specifier not provided by device, defaulting to English [ 260.775340][ T3754] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.782524][ T3754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.787686][ T3754] usb 6-1: Manufacturer: ч [ 260.791360][ T3754] usb 6-1: SerialNumber: syz [ 261.293785][ T3754] cdc_ncm 6-1:1.0: bind() failure [ 261.300588][ T3754] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 261.306398][ T3754] cdc_ncm 6-1:1.1: bind() failure [ 261.315282][ T3754] usb 6-1: USB disconnect, device number 2 05:57:46 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @random="3827f251636f", @val={@void}, {@mpls_mc={0x8848, {[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "4c09ef", 0x0, "e4e1d9"}}}}}}}, 0x0) 05:57:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:46 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 05:57:46 executing program 1: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 261.768171][ T5025] mkiss: ax0: crc mode is auto. [ 261.769644][ T5026] loop0: detected capacity change from 0 to 270 05:57:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, "926dfc13e911c8a5858c78a84d39078619fff7"}) 05:57:46 executing program 1: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x0) 05:57:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b31, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x80045440, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) [ 261.888145][ T5038] mkiss: ax0: crc mode is auto. 05:57:46 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:57:46 executing program 1: r0 = syz_io_uring_setup(0x2d51, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000d, 0x13, r0, 0x10000000) syz_io_uring_setup(0x2ff9, &(0x7f0000000140), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) [ 261.949201][ T5045] loop0: detected capacity change from 0 to 270 05:57:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)=';') 05:57:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:47 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) 05:57:47 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 262.654367][ T5052] loop0: detected capacity change from 0 to 270 05:57:47 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) [ 262.659717][ T39] audit: type=1400 audit(1656395867.103:165): avc: denied { create } for pid=5048 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.666022][ T5053] mkiss: ax0: crc mode is auto. 05:57:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5429, 0x0) [ 262.676084][ T39] audit: type=1400 audit(1656395867.103:166): avc: denied { connect } for pid=5048 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 05:57:47 executing program 3: syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5034, &(0x7f0000000200), &(0x7f0000001000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x5a6f, &(0x7f0000000140), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) 05:57:47 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b72, &(0x7f0000000100)) 05:57:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 262.789045][ T5069] mkiss: ax0: crc mode is auto. 05:57:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5401, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:47 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045300, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:47 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail=0,iocharset=default,flush']) chdir(&(0x7f0000000380)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 05:57:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df27dfadf0d42d2f"}) [ 262.847076][ T5075] loop0: detected capacity change from 0 to 270 05:57:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x540a, 0x0) [ 262.887451][ T5079] mkiss: ax0: crc mode is auto. 05:57:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5433, 0x0) 05:57:47 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x1}], 0x27, 0x0, &(0x7f0000000100)="b36af43ad24c47e43aba782b7ac20697fb7324c85c58b7130a098620b6b78a6378cebbc44447c1"}) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) [ 262.926462][ T39] audit: type=1400 audit(1656395867.373:167): avc: denied { read } for pid=5085 comm="syz-executor.1" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 262.959015][ T39] audit: type=1400 audit(1656395867.393:168): avc: denied { open } for pid=5085 comm="syz-executor.1" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 262.977998][ T39] audit: type=1400 audit(1656395867.393:169): avc: denied { ioctl } for pid=5085 comm="syz-executor.1" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 05:57:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5435, 0x0) 05:57:47 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045300, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5435, 0x0) 05:57:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 263.045294][ T5093] mkiss: ax0: crc mode is auto. 05:57:47 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5407, 0x0) 05:57:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x8001) ppoll(&(0x7f0000000000)=[{r2, 0x0, 0x64}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) 05:57:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5423, &(0x7f0000000100)) 05:57:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:47 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045300, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:47 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @random="3827f251636f", @val={@void}, {@mpls_mc={0x8848, {[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "4c09ef", 0x0, "e4e1d9"}}}}}}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000300)={@random="310f19b146a6", @empty, @void}, 0x0) 05:57:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) setsockopt$sock_linger(r0, 0x1, 0x8, &(0x7f0000000000), 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond_slave_0\x00', {0x1}, 0xff}) [ 263.261349][ T5115] mkiss: ax0: crc mode is auto. 05:57:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) setsockopt$sock_linger(r0, 0x1, 0x8, &(0x7f0000000000), 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond_slave_0\x00', {0x1}, 0xff}) 05:57:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x8001) ppoll(&(0x7f0000000000)=[{r2, 0x0, 0x64}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) 05:57:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) setsockopt$sock_linger(r0, 0x1, 0x8, &(0x7f0000000000), 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond_slave_0\x00', {0x1}, 0xff}) 05:57:48 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 05:57:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) setsockopt$sock_linger(r0, 0x1, 0x8, &(0x7f0000000000), 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond_slave_0\x00', {0x1}, 0xff}) 05:57:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 264.105320][ T5139] hub 9-0:1.0: USB hub found 05:57:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x80045432, 0x0) [ 264.108560][ T5139] hub 9-0:1.0: 1 port detected 05:57:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:49 executing program 1: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/psched\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='#\x00', &(0x7f0000000080)='./file0\x00', r1) 05:57:49 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 05:57:49 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 05:57:49 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 05:57:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 265.121807][ T5158] hub 9-0:1.0: USB hub found [ 265.130824][ T5158] hub 9-0:1.0: 1 port detected 05:57:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) [ 265.262056][ T5165] debugfs: Directory 'ptm3' with parent 'caif_serial' already present! 05:57:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x5) 05:57:50 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 05:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x5) 05:57:50 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 05:57:50 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001440)="9eec9d7b01c5365967bd9594a4792d2dd52901424f83d289e7add1805051b05d2017821538092cf36329e92637010cbb31a7caeb1a9c09a618f649a48dd55d7977182cb4d2185b552b9a4eeb0b0ff1cc2db0b942", 0x54, 0xfffffffffffffffa) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(r1, 0x2902, 0x100, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 266.092100][ T5189] hub 9-0:1.0: USB hub found 05:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x5) [ 266.103658][ T5189] hub 9-0:1.0: 1 port detected 05:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x5) 05:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 05:57:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 05:57:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 05:57:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b32, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x100, 0x800, 0x5, 0x1, 0x12, "d37c77478240c3bf2bea8d2b8c1f32d8ac72c7"}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = socket(0x1f, 0x7, 0x7) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000200)=0x215, 0x4) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/152) 05:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) 05:57:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b4c, &(0x7f0000000100)='; ') 05:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="fffe") 05:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) 05:57:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4a, 0x0) 05:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b33, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:51 executing program 3: socket(0x29, 0x80802, 0x0) 05:57:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x129081, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 05:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5419, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 267.039517][ T39] audit: type=1400 audit(1656395871.483:170): avc: denied { create } for pid=5222 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 05:57:51 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 267.053749][ T39] audit: type=1400 audit(1656395871.493:171): avc: denied { write } for pid=5226 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 05:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) [ 267.098235][ T5237] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! 05:57:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x1c}}, 0x0) 05:57:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5437, 0x0) 05:57:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) 05:57:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIS(r0, 0x5416, 0x0) 05:57:51 executing program 0: syz_io_uring_setup(0x2ff9, &(0x7f0000000140)={0x0, 0xc11b, 0x8}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x636c, &(0x7f0000000200), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 05:57:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5418, 0x0) 05:57:51 executing program 1: syz_io_uring_setup(0x3edc, &(0x7f0000000140)={0x0, 0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 05:57:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="24d50fee1e2b2d28", 0x8}, {&(0x7f00000002c0)="0b504ea6c9d3d5e892387db6afbba27dd24328348b9f3d548616dbb29f36215fd44d2bc0462b4f4846a1b1b4b3859dcfc548cc6bb5ece4c1c8eaad18955ceecc00000000000000", 0x3b}, {&(0x7f0000000140)="19546f384d510a8469b09714f06490022646fb6f00a07ec941c946f32a0546ced5c98390e93849eed9ef6f3a2a0391dac89affd3eddf6a9da8f88bb871276fbf4718e221a6e115381e79ea335bc13fb84cd1e58d564c0067edb6e8238dde32deea884abb1ecf1f29fac40a7f8979374960dfa5f33c87474b89919cf4ce356a67ce21ec", 0x83}, {&(0x7f0000000200)="37779657cc76dadbf08de4b9", 0xc}], 0x4, 0x0, 0xfffffffffffffd09}, 0x0) 05:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff, 0x0, "ed7cb2fd9dc0a4242470b30297ca3761e86d56"}) 05:57:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000008900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)="bd", 0x1}], 0x1}}, {{&(0x7f00000014c0)={0xa, 0x0, 0x0, @local, 0xfffffffd}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001500)="94", 0x1}], 0x1}}], 0x2, 0x0) [ 267.311363][ T39] audit: type=1400 audit(1656395871.753:172): avc: denied { write } for pid=5256 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.328048][ T39] audit: type=1400 audit(1656395871.753:173): avc: denied { connect } for pid=5256 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.341695][ T39] audit: type=1400 audit(1656395871.753:174): avc: denied { name_connect } for pid=5256 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 05:57:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b52, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b49, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000008900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)="bd", 0x1}], 0x1}}, {{&(0x7f00000014c0)={0xa, 0x0, 0x0, @local, 0xfffffffd}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001500)="94", 0x1}], 0x1}}], 0x2, 0x0) 05:57:51 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 05:57:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) close(r1) 05:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x560d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:51 executing program 3: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x4c0e, &(0x7f0000000180), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x0) 05:57:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5414, &(0x7f0000000100)=';') 05:57:51 executing program 3: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf, 0x13, r0, 0x10000000) 05:57:51 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x24, 0x7b, 0x8, 0x1bc7, 0x1101, 0xa690, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xeb, 0x48, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x3, 0x3ff}}, {{0x9, 0x5, 0x0, 0x3, 0x8}}]}}]}}]}}, 0x0) 05:57:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5609, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:51 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000580)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9c4fa955"}}) 05:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x541d, 0x0) 05:57:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000080)="6067eaa6d4916849", 0x8, 0x4000000, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) 05:57:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x560e, &(0x7f0000000100)=';') 05:57:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b30, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 267.782950][ T3755] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 268.043669][ T3755] usb 6-1: Using ep0 maxpacket: 8 [ 268.163355][ T3755] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 268.170108][ T3755] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 268.363160][ T3755] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1101, bcdDevice=a6.90 [ 268.369466][ T3755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.375047][ T3755] usb 6-1: Product: syz [ 268.378026][ T3755] usb 6-1: Manufacturer: syz [ 268.381534][ T3755] usb 6-1: SerialNumber: syz [ 268.386943][ T3755] usb 6-1: config 0 descriptor?? [ 268.435544][ T3755] option 6-1:0.0: GSM modem (1-port) converter detected [ 268.636635][ T1259] usb 6-1: USB disconnect, device number 3 [ 268.641900][ T1259] option 6-1:0.0: device disconnected 05:57:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x560f, &(0x7f0000000100)=';') 05:57:53 executing program 3: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000200)) 05:57:53 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) 05:57:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCEXCL(r0, 0x540c) syz_open_dev$ptys(0xc, 0x3, 0x1) 05:57:53 executing program 3: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x7386, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 05:57:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b32, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x29, 0x3, 0x0, 0x68) 05:57:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x560f, &(0x7f0000000100)=';') 05:57:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5414, 0x0) 05:57:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x8001) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) 05:57:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b45, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) read$FUSE(r0, &(0x7f0000004b00)={0x2020}, 0x2020) 05:57:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x560a, &(0x7f0000000100)='; ') 05:57:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5420, 0x0) 05:57:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)='\v ') 05:57:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5406, 0x0) 05:57:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x540b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5411, 0x0) 05:57:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5414, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:54 executing program 1: socket$inet(0x2, 0x801, 0x5) 05:57:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149442, 0x0) write$tun(r0, 0x0, 0x1012) 05:57:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x80045440, 0x0) 05:57:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5409, 0x0) 05:57:54 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40a85323, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f0000000100)='; ') 05:57:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x3240040}, 0xc) 05:57:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:54 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40505330, &(0x7f0000000080)) tkill(r0, 0x7) [ 270.358335][ T39] kauditd_printk_skb: 4 callbacks suppressed 05:57:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) [ 270.358350][ T39] audit: type=1400 audit(1656395874.803:179): avc: denied { bind } for pid=5361 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 05:57:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b70, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:54 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40a85323, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5457, 0x0) 05:57:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, 0x0, 0x0) 05:57:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)) [ 270.490561][ T39] audit: type=1400 audit(1656395874.933:180): avc: denied { setopt } for pid=5380 comm="syz-executor.1" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 05:57:54 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40505330, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:54 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 05:57:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b4b, &(0x7f0000000100)='; ') 05:57:55 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x9, 0x0, 0x0) 05:57:55 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40a85323, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="6501") 05:57:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x560b, 0x0) 05:57:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5427, 0x0) 05:57:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 05:57:55 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5432, 0x0) 05:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5413, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)='\r ') 05:57:55 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40a85323, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5433, 0x0) 05:57:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x40045436, 0x0) 05:57:55 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5401, 0x0) 05:57:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 05:57:55 executing program 1: syz_io_uring_setup(0x3edc, &(0x7f0000000140)={0x0, 0x0, 0x500}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 05:57:55 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01030000092403e705805822"], 0x0) 05:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5602, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x541e, 0x0) 05:57:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)=';') 05:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5457, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) [ 271.213029][ T3754] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 271.473020][ T3754] usb 5-1: Using ep0 maxpacket: 8 [ 271.593196][ T3754] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.673143][ T3754] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 271.678852][ T3754] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 271.684175][ T3754] usb 5-1: Manufacturer: syz [ 271.688443][ T3754] usb 5-1: config 0 descriptor?? [ 271.963209][ T3754] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 271.968426][ T3754] usb 5-1: Failed to initialize entity for entity 255 [ 271.972468][ T3754] usb 5-1: Failed to register entities (-22). [ 271.978118][ T3754] usb 5-1: USB disconnect, device number 4 05:57:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x540b, 0x0) 05:57:56 executing program 1: syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7386, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1cdc, &(0x7f00000018c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001940), &(0x7f0000001980)) 05:57:56 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b4c, &(0x7f0000000100)) 05:57:56 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 05:57:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5415, 0x0) 05:57:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4bfb, &(0x7f0000000100)) 05:57:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5423, 0x0) 05:57:57 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000080)) tkill(r0, 0x7) 05:57:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x541e, 0x0) 05:57:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5409, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:57 executing program 0: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000240), 0x80801, 0x0) write$damon_schemes(r0, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x20, 0x0, 0x1}, 0x66) 05:57:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5423, &(0x7f0000000100)=';') 05:57:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b67, &(0x7f0000000100)=';') 05:57:57 executing program 1: syz_clone3(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0x0], 0x1}, 0x58) syz_clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:57:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:57 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000001c0)=@name, 0x10) 05:57:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5608, 0x0) 05:57:57 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xc4972, 0xffffffffffffffff, 0x0) 05:57:57 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a97000205d0500905ff1010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 05:57:57 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5409, 0x0) 05:57:57 executing program 3: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) write$tun(r0, 0x0, 0x1007) 05:57:57 executing program 1: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000100), 0x4) 05:57:57 executing program 2: setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x3, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x40, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xff7f}, {0xd, 0x24, 0xf, 0x1, 0x9d5, 0xf7, 0xffff, 0x2e}, {0x6, 0x24, 0x1a, 0x5}, [@acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x20}, @dmm={0x7, 0x24, 0x14, 0x5, 0x9}, @mdlm_detail={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x7e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x5, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1f, 0x7f, 0x81}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x6f, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x60, 0x31, 0x49, {0x49, 0x2, "49031cd06124d9af5f3c5ddc2dd0b78736cbf93f04438f5049f8d860c2ab1996c8c5c6fe19bcc469f97f879303c76c7a688bc5409a42172ef40e2ebe1805b900aea5f6a2598689"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x40, 0x0, 0xc7, "c7ff00ef26f602046ee0f7263a23ae608afb21e3c0b9abf8af27255769c92f5010ea7d2844780afcd15cecb174eeef14e0f9fe0643cb1caab11e3a1d68ba3eac2547bf26e864eeb4e4d43a2ab64207c35f8e98c794d016fa6e0ca5f98429eecfe84b4be294319e1190b6950ce2f444da71f373917e61f28249b5434f2ba4299bdcc034f46a90db4430acc18e17bdf619f64403a2a55613b0709075b51d061475a11c4408384a1acbb4f1506a9bd4b3376cc003216d4b93e60c442770f755c591e28db62a6a3d76"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x8, 0x7, 0x9, 0x9, 0x6, 0x3, 0x8, 0x6, 0x9, 0xffff, 0x0, 0x4}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000680)={0x20, 0x83, 0x2}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000700)={0x20, 0x89, 0x2, 0x1}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 05:57:57 executing program 3: semctl$GETPID(0x0, 0x0, 0x4, 0x0) [ 273.103020][ T3754] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 273.182971][ T1259] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 273.363037][ T3754] usb 5-1: Using ep0 maxpacket: 32 [ 273.432990][ T1259] usb 7-1: Using ep0 maxpacket: 32 [ 273.593144][ T1259] usb 7-1: unable to get BOS descriptor or descriptor too short [ 273.645728][ T3754] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 273.651855][ T3754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.657296][ T3754] usb 5-1: Product: syz [ 273.660124][ T3754] usb 5-1: Manufacturer: syz [ 273.663476][ T3754] usb 5-1: SerialNumber: syz [ 273.669864][ T3754] usb 5-1: config 0 descriptor?? [ 273.673294][ T1259] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.679977][ T1259] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 273.686368][ T1259] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 273.725077][ T3754] pwc: Samsung MPC-C10 USB webcam detected. [ 273.934600][ T1259] usb 7-1: language id specifier not provided by device, defaulting to English [ 274.054811][ T1259] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.061917][ T1259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.068212][ T1259] usb 7-1: Manufacturer: ч [ 274.071230][ T1259] usb 7-1: SerialNumber: syz [ 274.383103][ T3754] pwc: recv_control_msg error -71 req 02 val 2b00 [ 274.403129][ T3754] pwc: recv_control_msg error -71 req 02 val 2700 [ 274.423171][ T3754] pwc: recv_control_msg error -71 req 04 val 1700 [ 274.443072][ T3754] pwc: recv_control_msg error -71 req 02 val 2c00 [ 274.463101][ T3754] pwc: recv_control_msg error -71 req 04 val 1000 [ 274.484549][ T3754] pwc: recv_control_msg error -71 req 04 val 1300 [ 274.503108][ T3754] pwc: recv_control_msg error -71 req 04 val 1400 [ 274.523087][ T3754] pwc: recv_control_msg error -71 req 02 val 2000 [ 274.543245][ T3754] pwc: recv_control_msg error -71 req 02 val 2100 [ 274.563388][ T3754] pwc: recv_control_msg error -71 req 02 val 2200 [ 274.573250][ T1259] cdc_ncm 7-1:1.0: bind() failure [ 274.581696][ T1259] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 274.587624][ T3754] pwc: recv_control_msg error -71 req 06 val 0600 [ 274.593117][ T1259] cdc_ncm 7-1:1.1: bind() failure [ 274.602621][ T1259] usb 7-1: USB disconnect, device number 4 [ 274.607284][ T3754] pwc: recv_control_msg error -71 req 04 val 1500 [ 274.623259][ T3754] pwc: recv_control_msg error -71 req 02 val 2500 [ 274.643697][ T3754] pwc: recv_control_msg error -71 req 02 val 2400 [ 274.664101][ T3754] pwc: recv_control_msg error -71 req 02 val 2600 [ 274.683127][ T3754] pwc: recv_control_msg error -71 req 02 val 2900 [ 274.705420][ T3754] pwc: recv_control_msg error -71 req 02 val 2800 [ 274.733151][ T3754] pwc: recv_control_msg error -71 req 04 val 1100 [ 274.753039][ T3754] pwc: recv_control_msg error -71 req 04 val 1200 [ 274.761490][ T3754] pwc: Registered as video71. [ 274.767210][ T3754] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb5/5-1/input/input7 [ 274.791035][ T3754] usb 5-1: USB disconnect, device number 5 05:57:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5411, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:57:59 executing program 1: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x5053, r0, 0x10000000) 05:57:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f0000000100)) 05:57:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003b40)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{0x0}, {&(0x7f00000023c0)}], 0x2, &(0x7f0000002500)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003900)=[{0x0}], 0x1, &(0x7f0000003600)=ANY=[@ANYBLOB="33c7386648c1485faab022d1000000000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58, 0x24004000}}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xce) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 05:57:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x540f, 0x0) 05:57:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd77, 0x0, 0x0) 05:57:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "540699b1"}}) 05:57:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5425, 0x0) 05:57:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x10000000, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:57:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5403, 0x0) 05:57:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x540b, 0x0) 05:58:00 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000340), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0x1, r0) keyctl$clear(0x7, r0) 05:58:00 executing program 1: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000240), 0x80801, 0x0) write$damon_schemes(r0, 0x0, 0x0) 05:58:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5403, 0x0) 05:58:00 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85322, &(0x7f0000000080)) tkill(r0, 0x7) 05:58:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b31, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/4096) 05:58:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x1ffffffffc) 05:58:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b66, &(0x7f0000000100)='; ') 05:58:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c6391c8e"}}) 05:58:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5602, &(0x7f0000000100)=';') 05:58:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b66, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:00 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0a85322, &(0x7f0000000080)) tkill(r0, 0x7) 05:58:00 executing program 0: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_setup(0x3384, &(0x7f00000001c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 05:58:00 executing program 1: mq_open(&(0x7f0000000040)=')\\#{\x00', 0x0, 0x0, 0x0) 05:58:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:00 executing program 0: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10003000) 05:58:00 executing program 3: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040)={0x0, 0x4af5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000d, 0x13, r0, 0x10000000) 05:58:00 executing program 1: syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@link_local, @broadcast, @void, {@generic={0x88ca, "82d706c8bb572248ec240f9369ff65a0"}}}, 0x0) 05:58:00 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x3, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) 05:58:00 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5405, 0x0) 05:58:00 executing program 1: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x0, 0x13, r0, 0x10000000) 05:58:00 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='unhide,utf8,mode=0x0000000000008145,overriderockperm,overriderockperm,mode=0x0000000000000003,map=acorn,sbsector=0x0000000000000002,overriderockperm,iocharset=c']) 05:58:00 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5427, 0x0) 05:58:00 executing program 0: r0 = syz_io_uring_setup(0x10001014, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x0) [ 276.295590][ T5589] ISOFS: Unable to identify CD-ROM format. 05:58:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x2d29, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000240)) 05:58:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)='; ') 05:58:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010aa18370000000000000109022400010000000009040000410300000009210000000122090009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x9, {[@main, @main=@item_4={0x3, 0x0, 0x0, "e0755e13"}, @global=@item_012={0x2, 0x1, 0x4, "1c06"}]}}, 0x0}, 0x0) 05:58:00 executing program 2: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000d, 0x13, r0, 0x10000000) syz_io_uring_setup(0x4c0e, &(0x7f0000000180), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 05:58:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f0000000100)) 05:58:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f0000000100)=';') 05:58:00 executing program 3: syz_io_uring_setup(0x3edc, &(0x7f0000000140)={0x0, 0x5941, 0x1ea}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 276.653062][ T3786] usb 6-1: new high-speed USB device number 4 using dummy_hcd 05:58:01 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5441, 0x0) 05:58:01 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) [ 276.893424][ T3786] usb 6-1: Using ep0 maxpacket: 16 [ 277.043186][ T3786] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 277.049869][ T3786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.056877][ T3786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.063143][ T3786] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 277.071152][ T3786] usb 6-1: New USB device found, idVendor=18aa, idProduct=0037, bcdDevice= 0.00 [ 277.076909][ T3786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.084726][ T3786] usb 6-1: config 0 descriptor?? [ 277.568769][ T3786] hid-generic 0003:18AA:0037.0002: unknown main item tag 0x0 [ 277.574203][ T3786] hid-generic 0003:18AA:0037.0002: unknown main item tag 0x0 [ 277.584411][ T3786] hid-generic 0003:18AA:0037.0002: hidraw1: USB HID v0.00 Device [HID 18aa:0037] on usb-dummy_hcd.1-1/input0 [ 277.764699][ T3787] usb 6-1: USB disconnect, device number 4 05:58:02 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, &(0x7f00000000c0), 0x0) 05:58:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b67, &(0x7f0000000100)='; ') 05:58:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x2d29, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000240)) 05:58:02 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 05:58:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5441, 0x0) 05:58:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b3a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b4b, &(0x7f0000000100)=';') 05:58:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f0000000100)=';') 05:58:03 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x545d, 0x0) 05:58:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5419, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:03 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "504c8bea8478e538"}) 05:58:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x80045438, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 3: ioctl$TCSETSW2(0xffffffffffffffff, 0x4b2f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x129081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 05:58:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5437, 0x0) 05:58:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x1100, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5423, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x40086602, &(0x7f0000000100)=';') 05:58:03 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x541d, 0x0) 05:58:03 executing program 2: syz_io_uring_setup(0x7386, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) 05:58:03 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5335, &(0x7f0000000080)) tkill(r0, 0x7) 05:58:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4bfb, &(0x7f0000000100)='; ') 05:58:03 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x541d, 0x0) 05:58:03 executing program 3: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)) 05:58:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="0f20") 05:58:03 executing program 2: syz_clone3(&(0x7f0000000a40)={0x4000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000540)=""/218, 0xda, 0x0, 0x0}, 0x58) 05:58:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b72, &(0x7f0000000100)=';') 05:58:03 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5433, 0x0) 05:58:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b65, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) read(r1, &(0x7f0000000500)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x287}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5335, &(0x7f0000000080)) tkill(r0, 0x7) 05:58:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5420, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:03 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x402c542b, 0x0) 05:58:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x540f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b41, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b40)=[@text32={0x20, 0x0}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)) 05:58:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5413, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5401, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d6dcbea220ff0100bb17e5c2a4ee1e9114b8ef"}) 05:58:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b4b, &(0x7f0000000100)) 05:58:03 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x545d, 0x0) 05:58:03 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5434, 0x0) 05:58:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b40)=[@text32={0x20, 0x0}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)) 05:58:04 executing program 0: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$TIOCGETD(r0, 0x5424, 0x0) 05:58:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b4d, &(0x7f0000000100)='; ') 05:58:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5410, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)='\f ') 05:58:04 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5403, 0x0) [ 279.684694][ T39] audit: type=1400 audit(1656395884.133:181): avc: denied { ioctl } for pid=5738 comm="syz-executor.0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36734 ioctlcmd=0x5424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 05:58:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x540b, 0x0) 05:58:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b66, &(0x7f0000000100)=';') 05:58:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b62, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "92acd78ca4453f99de68a100bff3c31ace00d6"}) 05:58:04 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5435, 0x0) 05:58:04 executing program 0: r0 = syz_io_uring_setup(0x2d54, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x10000000) 05:58:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "540699b1"}, 0x0, 0x4, {}, 0x86}) 05:58:04 executing program 2: syz_io_uring_setup(0x1f, &(0x7f0000000100), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) 05:58:04 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x0, 0x41, "9fe1ea18d1e44a1c91d9a8ffd06309bd333411050462d0a6fa5381a237abc3dba7688c84d882615ebb3c46ddb911b4a6cd0678292850b553545789d7746e023db5"}) 05:58:04 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {0x9, 0x3}}}}]}}, 0x0) 05:58:04 executing program 3: syz_io_uring_setup(0x768e, &(0x7f0000000140)={0x0, 0x6179, 0xe, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) 05:58:04 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x6, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "3060de8d"}, {0x5, 0x24, 0x0, 0x5768}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7f, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc1, 0x17, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xfe, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x90, 0x5, 0x3, 0xff, 0x2d}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000000680)=@string={0x2}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}]}) 05:58:04 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x802c542a, 0x0) [ 280.336430][ T39] audit: type=1400 audit(1656395884.783:182): avc: denied { sqpoll } for pid=5766 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 05:58:04 executing program 3: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'macroman'}}]}) 05:58:04 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) [ 280.378551][ T5774] exFAT-fs (loop3): invalid boot record signature [ 280.380562][ T5776] loop1: detected capacity change from 0 to 512 [ 280.385668][ T3137] blk_print_req_error: 11 callbacks suppressed [ 280.385684][ T3137] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 280.386221][ T5774] exFAT-fs (loop3): failed to read boot sector [ 280.386253][ T5774] exFAT-fs (loop3): failed to recognize exfat type [ 280.407539][ T3137] buffer_io_error: 7 callbacks suppressed [ 280.407549][ T3137] Buffer I/O error on dev loop1, logical block 0, async page read [ 280.417105][ T3137] loop1: unable to read partition table [ 280.436622][ T5776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.455771][ T39] audit: type=1400 audit(1656395884.893:183): avc: denied { mount } for pid=5775 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 280.469333][ T39] audit: type=1400 audit(1656395884.903:184): avc: denied { write } for pid=5775 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 05:58:04 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) [ 280.483548][ T39] audit: type=1400 audit(1656395884.903:185): avc: denied { add_name } for pid=5775 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.502044][ T39] audit: type=1400 audit(1656395884.903:186): avc: denied { create } for pid=5775 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 280.508587][ T3717] EXT4-fs (loop1): unmounting filesystem. 05:58:04 executing program 3: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'macroman'}}]}) [ 280.523132][ T39] audit: type=1400 audit(1656395884.903:187): avc: denied { create } for pid=5775 comm="syz-executor.1" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 280.551356][ T39] audit: type=1400 audit(1656395884.903:188): avc: denied { read } for pid=5775 comm="syz-executor.1" name="file0" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 280.555921][ T5780] exFAT-fs (loop3): invalid boot record signature [ 280.565778][ T39] audit: type=1400 audit(1656395884.903:189): avc: denied { write } for pid=5775 comm="syz-executor.1" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 280.570710][ T5780] exFAT-fs (loop3): failed to read boot sector [ 280.597387][ T39] audit: type=1400 audit(1656395884.903:190): avc: denied { add_name } for pid=5775 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 280.597715][ T5780] exFAT-fs (loop3): failed to recognize exfat type [ 280.616665][ T5782] loop1: detected capacity change from 0 to 512 [ 280.623164][ T3755] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 280.632372][ T5782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.633192][ T51] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 280.673111][ T3717] EXT4-fs (loop1): unmounting filesystem. [ 280.893047][ T3755] usb 5-1: Using ep0 maxpacket: 8 [ 281.033175][ T3755] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.041325][ T3755] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.043271][ T51] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 281.048409][ T3755] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.055679][ T51] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 281.063090][ T3755] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 281.070100][ T51] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 281.077870][ T3755] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.085727][ T51] usb 7-1: config 1 interface 0 has no altsetting 0 [ 281.096735][ T3755] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 281.103194][ T3755] usb 5-1: config 1 interface 1 has no altsetting 0 [ 281.273074][ T3755] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.279190][ T3755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.285069][ T3755] usb 5-1: Product: syz [ 281.287813][ T3755] usb 5-1: Manufacturer: syz [ 281.291432][ T3755] usb 5-1: SerialNumber: syz [ 281.344866][ T51] usb 7-1: string descriptor 0 read error: -22 [ 281.348821][ T51] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.354417][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.383752][ T5769] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 281.388847][ T5769] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 281.553114][ T3755] usb 5-1: selecting invalid altsetting 0 [ 281.558967][ T3755] usb 5-1: selecting invalid altsetting 0 [ 281.564207][ T3755] cdc_ncm 5-1:1.0: bind() failure [ 281.569564][ T3755] usb 5-1: selecting invalid altsetting 0 [ 281.573284][ T3755] cdc_ncm: probe of 5-1:1.1 failed with error -22 [ 281.577637][ T3755] usb 5-1: selecting invalid altsetting 0 [ 281.581186][ T3755] cdc_mbim: probe of 5-1:1.1 failed with error -22 [ 281.586021][ T3755] usb 5-1: selecting invalid altsetting 0 [ 281.589641][ T3755] usbtest: probe of 5-1:1.1 failed with error -22 [ 281.598654][ T3755] usb 5-1: USB disconnect, device number 6 [ 281.625016][ T51] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 281.638949][ T51] usb 7-1: USB disconnect, device number 5 05:58:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x7ffff000}], 0x1}}], 0x1, 0x0) 05:58:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000080)="6067ea", 0x3, 0x4000000, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) 05:58:06 executing program 3: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'macroman'}}]}) 05:58:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000056c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="13", 0x1}], 0x1}}], 0x1, 0x0) 05:58:06 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x9e, &(0x7f00000000c0)=""/158, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:58:06 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security', 0x40700, 0x0) 05:58:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x34000}], 0x1}}], 0x1, 0x5dc) 05:58:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x1}], 0x1}}], 0x1, 0x0) [ 282.144139][ T5795] exFAT-fs (loop3): invalid boot record signature [ 282.150017][ T5795] exFAT-fs (loop3): failed to read boot sector [ 282.155822][ T5795] exFAT-fs (loop3): failed to recognize exfat type 05:58:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x34000}], 0x1}}], 0x1, 0x60) 05:58:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x34000}], 0x1}}], 0x1, 0x5dc) 05:58:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x2, 0x0, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x1}], 0x1}}], 0x1, 0x0) 05:58:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x1}], 0x1}}], 0x1, 0x0) 05:58:06 executing program 0: syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/111, 0x6f, &(0x7f00000003c0)=""/50, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58) 05:58:06 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000340)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000f80)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1df001cc2de850f1fffb2aed768634e", 0x2d, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000980)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:58:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0xdc050000}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x1}], 0x1}}], 0x1, 0x0) [ 282.269268][ T5811] loop1: detected capacity change from 0 to 270 05:58:06 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000200)=""/216) 05:58:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:58:06 executing program 1: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0x200012be, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid}, {@fsuuid}]}) [ 282.478303][ C2] hrtimer: interrupt took 341939 ns [ 282.484813][ T5819] loop1: detected capacity change from 0 to 32766 05:58:07 executing program 1: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0x200012be, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid}, {@fsuuid}]}) 05:58:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) pwritev(r0, &(0x7f0000000980)=[{&(0x7f0000000580)="d422843ab572abb69ee93148d9a563b4b7558fadac7301641a60f9950dff15dbd042cd99ae1532fe3237452eac96f299a12636459fc9a7cfeb6cf837c2119d6a2731f31d01e3b52c64fafbd92a77696d0fc8", 0x52}, {&(0x7f0000000600)='aB', 0x2}], 0x2, 0x81, 0x9) 05:58:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x34000}], 0x1}}], 0x1, 0x0) 05:58:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000000)='z', 0x1}], 0x1}}], 0x1, 0x0) 05:58:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 05:58:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) [ 283.229318][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.236887][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.278823][ T5823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 05:58:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 05:58:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 05:58:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 05:58:07 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2c, 0x0, 0x0, 0x0, 0x700) [ 283.527507][ T5821] loop1: detected capacity change from 0 to 32766 05:58:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6) 05:58:08 executing program 0: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) 05:58:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0xf, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x1}], 0x1}}], 0x1, 0x0) 05:58:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) 05:58:08 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2c, 0x0, 0x0, 0x0, 0x700) 05:58:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x1}], 0x1}}], 0x1, 0x0) 05:58:08 executing program 0: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) 05:58:08 executing program 2: pipe2(0x0, 0x4880) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 05:58:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 05:58:08 executing program 0: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) 05:58:08 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4de0}]}) 05:58:08 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed}}}, 0x14) 05:58:08 executing program 1: openat$incfs(0xffffffffffffffff, 0x0, 0x400000, 0x0) 05:58:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6) 05:58:08 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0xf9, 0xf1}, 0x20) 05:58:09 executing program 2: select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x1000}, &(0x7f0000000100)={0x77359400}) 05:58:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x17, &(0x7f0000000340)=[{&(0x7f0000000080)='z', 0x1}], 0x1}}], 0x1, 0x0) 05:58:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) 05:58:09 executing program 1: socket$inet(0x2, 0x0, 0xa28e) 05:58:09 executing program 3: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2c980, 0x0) 05:58:09 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2c980, 0x0) 05:58:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) 05:58:09 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x10001, 0x2, 0x0, "850f5b5c3c4e0c29f475995cfdadfceae70694243feb17e665cafcca20497e69"}) 05:58:09 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f00000001c0)={0x80000000, 0x0, &(0x7f0000000240)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f00000004c0)={r1, 0x0, &(0x7f0000000440)}) 05:58:09 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) 05:58:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) 05:58:09 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000240), 0x7, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000280)) 05:58:09 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x3}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 05:58:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, 0x0) 05:58:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 05:58:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001d40)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 05:58:09 executing program 1: socket$inet6(0xa, 0x0, 0xfffffffa) 05:58:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:58:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 05:58:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$damon_schemes(r0, &(0x7f0000000d80), 0x66) 05:58:09 executing program 1: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f0000001540)) 05:58:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 05:58:09 executing program 3: semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x1000}, {0x1, 0x80}, {0x1}], 0x3, &(0x7f0000000440)) [ 284.906986][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 284.907029][ T39] audit: type=1400 audit(1656395889.353:207): avc: denied { create } for pid=5916 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 05:58:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 05:58:09 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ca3ca479b83febe336fdac2ac036ec129bbc3bebe2e055da1cd96d57a5ba9c73"}) 05:58:09 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 05:58:09 executing program 0: socketpair(0xa, 0x805, 0x0, &(0x7f00000002c0)) [ 284.972564][ T39] audit: type=1400 audit(1656395889.413:208): avc: denied { audit_read } for pid=5922 comm="syz-executor.2" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 05:58:09 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x149001, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) [ 284.998421][ T39] audit: type=1400 audit(1656395889.413:209): avc: denied { create } for pid=5925 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 05:58:09 executing program 1: ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 05:58:09 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "850f5b5c3c4e0c29f475995cfdadfceae70694243feb17e665cafcca20497e69"}) [ 285.016659][ T39] audit: type=1400 audit(1656395889.413:210): avc: denied { ioctl } for pid=5925 comm="syz-executor.1" path="socket:[39957]" dev="sockfs" ino=39957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 05:58:09 executing program 0: select(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 285.057779][ T39] audit: type=1400 audit(1656395889.463:211): avc: denied { write } for pid=5930 comm="syz-executor.2" name="nvram" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 05:58:09 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 05:58:09 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x149001, 0x0) 05:58:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 05:58:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000001400)=[@increfs_done], 0x0, 0x0, 0x0}) 05:58:09 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) 05:58:09 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x840, 0x101) [ 285.136651][ T39] audit: type=1400 audit(1656395889.573:212): avc: denied { set_context_mgr } for pid=5944 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 05:58:09 executing program 3: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004440)) syz_usb_connect(0x2, 0x3d4, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x30, 0x31, 0x5d, 0x10, 0x257a, 0x260b, 0x3a9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c2, 0x1, 0x9, 0x4, 0x0, 0x95, [{{0x9, 0x4, 0x40, 0x6, 0x9, 0x72, 0xbe, 0xda, 0xb2, [@generic={0xf9, 0xb, "303bdf9f4284ad7124d3e30cf8d505d6800c66b1e27fc59daf7e2339f311551b8bf8443719032b2d66968307158be68a7dd51620fe9c12027ae5d3a7bbc88977a9db8d665affeda589c5dbc0ad310c7425050cf5d452ab519e3fda4f1e4409c5ef08ef35bd2ca99ff0665ed33272d6d5708318592992b1eb9afbfbeefd0b3c0c2eb405ec722c34604c1deac206f1bc5b1c240ac3e8dd1bc10baf4daa51c1d21146bfc6446db2c5445856e16828b00d9fa1384e44b5f85d8bf49e23864d86d9760ceab965419198f639e131fdf014cc10f71098260b6deed5002628aea84068cb439922c52adb8788a25ef457fa587bfe925dc2cfb1c8c9"}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x92, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8150ff43fdf179ad, 0x10, 0x8, 0x3b, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x1, 0x5, [@generic={0x62, 0xf, "b74efe576434d62ba9092319b6a485d3acc20ddae7a7bc6d7bc7bc0bed9643fb00ebe74cbbe9d897c2fa989d9d189731d6ae97c72c2ffe34db208f5adba15fdb1111f0529d8c19972ecbde20c1c569ebc7d11638a0a78877b23067c4515ae369"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x918ef499748e27d4, 0x40, 0x3, 0x2, 0x1}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x80, 0x6, 0x1f, [@generic={0xf4, 0x23, "b5e19df75dd99bc3ec106af6ccb13ec4d129aedd426903879d6aafaccb0f09214efb28f850c55c2565954a90fb2bf82617fbe18aa732db49d42960be79f895154fa802ee1eaa2ffd443cda7b0f23db3ab0b8017016cb45f342891323852c7403645a0929d6faa862f405c3cadc71b115ca1c65e9171ab7236ac0c9b5d1d65b6b6415126b48ad9494998c16a26ee2dc4ccc18a22b693c6dad459da751976d2e155c6075f7b2efd78e6e6c162bbdd817d5fee5143b3cf688bda5b983947717af455c08930c10622a259f0e5ad4bb23a58a245943119de549fc26966d90d0d6f9d898ebf1ae387c439859512a80096e4fe2706a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7f, 0x20, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0xbc80522ba31ae006, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x1c, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1f, 0x84, 0x3, [@generic={0xdf, 0x22, "924a338b1e01d5098d32f33fc3edcab3fe7dbb538f02f9027654e8b484805f636a2e359f5506a900c83d3640308253ead1ba238e1f322d40259e86717fa1c0289664b1821f7a169c055ec33cf15120a7f089f9e2d735d2f75ef58520bf189b475c3f7d6ae08e94bd4d05470caa98178cdc11fa45697dfe58f223a943bbfcab36236fbeb16fcf6773a078326b6362b54ba9260fe2cef43b229d24164a5bc076f7cd80a1a7785b797577bf34fde75b00036965f38af344a84ab3b93879cc52c85ce78e54e590625252230d59c41a5cb6bb61b971d535f733a4a39a0403a6"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x1c, 0x2, 0x0, 0x8, 0x2}, 0xc5, &(0x7f0000000700)={0x5, 0xf, 0xc5, 0x2, [@generic={0x55, 0x10, 0x4, "9c8b149929ec535d6219a937fd92f5be1c349fe07d1be2a46aa9ba1d6c371d9e865adbcbc88041a0e8039b3d995453d9ae135fa0b7ea5c4ef75c9fda85c346d808eccfd585f7daa9350f51a40a7175effaca"}, @generic={0x6b, 0x10, 0xa, "be909c17781a97d6c8e0a464d38a7b43b8b95c5b601cc8cd3da2b135550be24ec6fb7f8991391391f583ce0e606deaeb1300cdf2a2b275d2b197bb144b144d0201d6c4546c21d99459d860848af9b5b920726ea1bd337609440f7ea9df616d569d4f78f3ae335c03"}]}, 0x6, [{0xd9, &(0x7f0000000800)=@string={0xd9, 0x3, "dad2604a44edcdb0311761e1a160ddfbd4aa350907dabbbf75f8e45843c026501ad71d37e7945ed388e1e4e87ef121dcb1c62df72ce6662e51b9fa15adbe33effd2419ce34fe0d7406379fd2e307d28434e056adf1703dc9f6277a15bdceb34c023514938c0a8b546d9869be3b7ea1fcbf4922c5f1e56715ae7a188c93f52c25348effd5eebcdaa5789eb16220b883f9aa0b19dfd7feb139ddc57d677360282e3719cf34e485ccfc9af639330fd9042990244480f7929b919f1cb80f5cd4c3743d0f8eeb9906fb10dbd4ba8ce8809180e80088185f912e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44c}}, {0xdf, &(0x7f0000000980)=@string={0xdf, 0x3, "3a74dcb518deee6b874a766d77b5ad67cb8e96212178ef48de6caf907322366a300839d3c29801c5af424601c276583012e6620a07b042acef10cdd32e1e241780ecefb2d9e4689eab944d94f61b92462e88e44d4d727c14215a11e0b0655f33801915e1a302a4c35250763cdc8ec327d1bcf2018c55dc087c6784f947f674e4c72658d7887ca8f3e93b4953955c665984d1c0c749ad24e1620ea7862b7fac88fa5e82ce7289a285b96019e594161677318c37da4f7316e51353431771cdbdce6e7da5fb83560593d8f1363c6c0124525775c102b35079ec2d2c62ddd5"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x422}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "d0ddea14aedfde03fcabaa3f83c22ac7903aa5938ad580295f6d8b1e77bfea15f007b0967744640b0202558019ec686aae4004d3c9d8d17635093047567684d197a5682e1a045b4afb258b08e22306ebb0c24213f36529cd02c47e1e1e53c590aef1e69227"}}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000000c0)=""/31, 0x1f}], 0x3, &(0x7f0000000180)=""/154, 0x9a}, 0x20) [ 285.503105][ T47] usb 8-1: new full-speed USB device number 3 using dummy_hcd 05:58:10 executing program 0: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 05:58:10 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMSET(r0, 0x5413, 0x0) 05:58:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@dev, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5fe3a5", 0xc, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 285.943788][ T47] usb 8-1: not running at top speed; connect to a high speed hub 05:58:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 05:58:10 executing program 1: memfd_create(&(0x7f0000000080)='/dev/nvram\x00', 0x6) 05:58:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) [ 286.026677][ T47] usb 8-1: config 9 has an invalid interface number: 64 but max is 0 [ 286.035611][ T47] usb 8-1: config 9 has no interface number 0 [ 286.040802][ T47] usb 8-1: config 9 interface 64 altsetting 6 has an invalid endpoint with address 0xAD, skipping 05:58:10 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) [ 286.073577][ T47] usb 8-1: config 9 interface 64 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 286.103037][ T47] usb 8-1: config 9 interface 64 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 286.114774][ T47] usb 8-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 286.133171][ T47] usb 8-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 286.141647][ T47] usb 8-1: config 9 interface 64 has no altsetting 0 [ 286.323237][ T47] usb 8-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=3a.9c [ 286.330335][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.337884][ T47] usb 8-1: Product: ь [ 286.341044][ T47] usb 8-1: Manufacturer: ж [ 286.344963][ T47] usb 8-1: SerialNumber: 琺뗜毮䪇浶땷枭軋↖砡䣯泞邯≳樶࠰팹飂씁䊯ņ盂じ੢뀇걂ჯ폍Ḯᜤ닯鹨钫鑍᯶䚒蠮䷤牍ᑼ娡新㍟ᦀʣ쎤偒㱶軜⟃병Dz喌ࣜ杼濾⛇흘粈㯩卉岕奦톄쟀굉๢蚧缫袬建캂襲薢悹ᚔ眖谱獏匓ᝃ쵱캽絮ﮥ嚃錅㰶Ŭ判畗ˁ傳Ⱝ [ 286.404218][ T5951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.724940][ T47] option 8-1:9.64: GSM modem (1-port) converter detected [ 286.752985][ T47] usb 8-1: USB disconnect, device number 3 [ 286.762328][ T47] option 8-1:9.64: device disconnected 05:58:11 executing program 3: semtimedop(0x0, &(0x7f00000003c0)=[{0x1}], 0x1, &(0x7f0000000440)) 05:58:11 executing program 2: semtimedop(0x0, &(0x7f00000003c0)=[{0x1}], 0x1, 0x0) 05:58:11 executing program 1: io_uring_setup(0x7a3a, &(0x7f0000000000)={0x0, 0x679f}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) epoll_create(0x0) 05:58:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 05:58:11 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x420}, 0x420}}, 0x0) 05:58:11 executing program 1: memfd_create(&(0x7f0000000040)='./binderfs/binder0\x00', 0x4) 05:58:11 executing program 3: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 287.181109][ T39] audit: type=1400 audit(1656395891.623:213): avc: denied { nlmsg_write } for pid=5976 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 05:58:11 executing program 2: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) 05:58:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced}) 05:58:11 executing program 1: semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0xe6e9}], 0x1, 0x0) 05:58:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "50a88954"}, 0x0, 0x2, {0x0}}) 05:58:11 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000002400), 0xc0, 0x0) 05:58:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f3198627"}, 0x0, 0x3, {0x0}}) 05:58:11 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x3, @thr={0x0, 0x0}}, 0x0) 05:58:11 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x30, 0x31, 0x5d, 0x0, 0x257a, 0x260b, 0x3a9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0xbe, 0xda}}]}}]}}, 0x0) 05:58:11 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0x149001, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x679f, 0x0, 0x200002}) io_uring_setup(0xd4b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x9b}) 05:58:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) 05:58:11 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(0xffffffffffffffff) memfd_create(&(0x7f0000000080)='/dev/nvram\x00', 0x6) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 05:58:11 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xbcc82, 0x0) [ 287.553011][ T1259] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 287.742964][ T1259] usb 8-1: device descriptor read/64, error 18 [ 288.013121][ T1259] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 288.213893][ T1259] usb 8-1: device descriptor read/64, error 18 [ 288.336810][ T1259] usb usb8-port1: attempt power cycle [ 288.742959][ T1259] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 288.833246][ T1259] usb 8-1: Invalid ep0 maxpacket: 0 [ 288.983028][ T1259] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 289.074529][ T1259] usb 8-1: Invalid ep0 maxpacket: 0 [ 289.078371][ T1259] usb usb8-port1: unable to enumerate USB device 05:58:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="ee"}) 05:58:14 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x10602, 0x0) 05:58:14 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) 05:58:14 executing program 2: renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) 05:58:14 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0x401c5820, 0x0) 05:58:14 executing program 2: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000000c0)=""/84) [ 290.303328][ T39] audit: type=1400 audit(1656395894.743:214): avc: denied { write } for pid=6007 comm="syz-executor.0" name="renderD128" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 05:58:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x1, @sdr}) [ 290.323414][ T39] audit: type=1400 audit(1656395894.743:215): avc: denied { open } for pid=6007 comm="syz-executor.0" path="/dev/dri/renderD128" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 05:58:14 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0xb4}) 05:58:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 05:58:14 executing program 3: semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0xe6e9, 0x1000}, {0x1, 0x80}, {0x1}], 0x3, &(0x7f0000000440)) [ 290.345584][ T39] audit: type=1400 audit(1656395894.773:216): avc: denied { ioctl } for pid=6013 comm="syz-executor.0" path="/dev/nvram" dev="devtmpfs" ino=629 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 05:58:14 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x149001, 0x0) write(r0, &(0x7f0000000000)="bb", 0x1) 05:58:14 executing program 0: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0x0, r0+10000000}, 0x0) 05:58:14 executing program 2: io_uring_setup(0x51, &(0x7f0000000000)={0x0, 0x22da, 0x9}) 05:58:14 executing program 2: memfd_create(&(0x7f0000000040)='./binderfs/binder0\x00', 0x0) 05:58:14 executing program 3: semtimedop(0x0, &(0x7f00000003c0)=[{0x1, 0x80}, {0x1}], 0x2, &(0x7f0000000440)) 05:58:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={r1}, 0x0, 0x0) 05:58:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_setlink={0x20}, 0x20}}, 0x0) 05:58:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x360) 05:58:14 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x0) [ 290.432605][ T39] audit: type=1400 audit(1656395894.873:217): avc: denied { bind } for pid=6041 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.445799][ T39] audit: type=1400 audit(1656395894.883:218): avc: denied { accept } for pid=6041 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.458049][ T39] audit: type=1400 audit(1656395894.883:219): avc: denied { write } for pid=6041 comm="syz-executor.2" path="socket:[37876]" dev="sockfs" ino=37876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 05:58:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x360) 05:58:15 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x101843, 0x0) 05:58:15 executing program 3: mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 05:58:15 executing program 2: select(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 05:58:15 executing program 1: r0 = getpgid(0x0) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)) 05:58:15 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) fanotify_mark(r0, 0x11, 0x10000000, 0xffffffffffffffff, 0x0) 05:58:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)) [ 291.290622][ T6056] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 291.291023][ T6055] binder: 6053:6055 ioctl c0306201 0 returned -14 05:58:15 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x225000, 0x0) 05:58:15 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x0, 0x0) 05:58:15 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0), 0x8) 05:58:15 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0xf485275f74edaeaf, 0x0) 05:58:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xeb1a, 0x1, {0x1, @win={{}, 0x0, 0x10000, &(0x7f0000000140), 0x0, 0x0}}}) 05:58:16 executing program 3: select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x1000}, 0x0) 05:58:16 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) close(r0) 05:58:16 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:58:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 05:58:16 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x24}}, 0x0) 05:58:16 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "6fb5f31bded243b6637f403a92c5e5a1f26d4615a6361ca53c5ad1a4cfafd820"}) 05:58:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$damon_schemes(r0, 0x0, 0x0) 05:58:16 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004440)) syz_usb_connect(0x2, 0x3b6, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x30, 0x31, 0x5d, 0x10, 0x257a, 0x260b, 0x3a9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a4, 0x1, 0x9, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x40, 0x6, 0x9, 0x72, 0xbe, 0xda, 0xb2, [@generic={0xdb, 0xb, "303bdf9f4284ad7124d3e30cf8d505d6800c66b1e27fc59daf7e2339f311551b8bf8443719032b2d66968307158be68a7dd51620fe9c12027ae5d3a7bbc88977a9db8d665affeda589c5dbc0ad310c7425050cf5d452ab519e3fda4f1e4409c5ef08ef35bd2ca99ff0665ed33272d6d5708318592992b1eb9afbfbeefd0b3c0c2eb405ec722c34604c1deac206f1bc5b1c240ac3e8dd1bc10baf4daa51c1d21146bfc6446db2c5445856e16828b00d9fa1384e44b5f85d8bf49e23864d86d9760ceab965419198f639e131fdf014cc10f71098260b6deed500"}], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x92, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8150ff43fdf179ad, 0x10, 0x8, 0x3b, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x1, 0x5, [@generic={0x62, 0xf, "b74efe576434d62ba9092319b6a485d3acc20ddae7a7bc6d7bc7bc0bed9643fb00ebe74cbbe9d897c2fa989d9d189731d6ae97c72c2ffe34db208f5adba15fdb1111f0529d8c19972ecbde20c1c569ebc7d11638a0a78877b23067c4515ae369"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x918ef499748e27d4, 0x40, 0x3, 0x2, 0x1}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x80, 0x6, 0x1f, [@generic={0xf4, 0x23, "b5e19df75dd99bc3ec106af6ccb13ec4d129aedd426903879d6aafaccb0f09214efb28f850c55c2565954a90fb2bf82617fbe18aa732db49d42960be79f895154fa802ee1eaa2ffd443cda7b0f23db3ab0b8017016cb45f342891323852c7403645a0929d6faa862f405c3cadc71b115ca1c65e9171ab7236ac0c9b5d1d65b6b6415126b48ad9494998c16a26ee2dc4ccc18a22b693c6dad459da751976d2e155c6075f7b2efd78e6e6c162bbdd817d5fee5143b3cf688bda5b983947717af455c08930c10622a259f0e5ad4bb23a58a245943119de549fc26966d90d0d6f9d898ebf1ae387c439859512a80096e4fe2706a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7f, 0x20, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0xbc80522ba31ae006, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x1c, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1f, 0x84, 0x3, [@generic={0xdf, 0x22, "924a338b1e01d5098d32f33fc3edcab3fe7dbb538f02f9027654e8b484805f636a2e359f5506a900c83d3640308253ead1ba238e1f322d40259e86717fa1c0289664b1821f7a169c055ec33cf15120a7f089f9e2d735d2f75ef58520bf189b475c3f7d6ae08e94bd4d05470caa98178cdc11fa45697dfe58f223a943bbfcab36236fbeb16fcf6773a078326b6362b54ba9260fe2cef43b229d24164a5bc076f7cd80a1a7785b797577bf34fde75b00036965f38af344a84ab3b93879cc52c85ce78e54e590625252230d59c41a5cb6bb61b971d535f733a4a39a0403a6"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x1c, 0x2, 0x0, 0x8, 0x2}, 0xc5, &(0x7f0000000700)={0x5, 0xf, 0xc5, 0x2, [@generic={0x55, 0x10, 0x4, "9c8b149929ec535d6219a937fd92f5be1c349fe07d1be2a46aa9ba1d6c371d9e865adbcbc88041a0e8039b3d995453d9ae135fa0b7ea5c4ef75c9fda85c346d808eccfd585f7daa9350f51a40a7175effaca"}, @generic={0x6b, 0x10, 0xa, "be909c17781a97d6c8e0a464d38a7b43b8b95c5b601cc8cd3da2b135550be24ec6fb7f8991391391f583ce0e606deaeb1300cdf2a2b275d2b197bb144b144d0201d6c4546c21d99459d860848af9b5b920726ea1bd337609440f7ea9df616d569d4f78f3ae335c03"}]}, 0x6, [{0xd9, &(0x7f0000000800)=@string={0xd9, 0x3, "dad2604a44edcdb0311761e1a160ddfbd4aa350907dabbbf75f8e45843c026501ad71d37e7945ed388e1e4e87ef121dcb1c62df72ce6662e51b9fa15adbe33effd2419ce34fe0d7406379fd2e307d28434e056adf1703dc9f6277a15bdceb34c023514938c0a8b546d9869be3b7ea1fcbf4922c5f1e56715ae7a188c93f52c25348effd5eebcdaa5789eb16220b883f9aa0b19dfd7feb139ddc57d677360282e3719cf34e485ccfc9af639330fd9042990244480f7929b919f1cb80f5cd4c3743d0f8eeb9906fb10dbd4ba8ce8809180e80088185f912e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44c}}, {0xdf, &(0x7f0000000980)=@string={0xdf, 0x3, "3a74dcb518deee6b874a766d77b5ad67cb8e96212178ef48de6caf907322366a300839d3c29801c5af424601c276583012e6620a07b042acef10cdd32e1e241780ecefb2d9e4689eab944d94f61b92462e88e44d4d727c14215a11e0b0655f33801915e1a302a4c35250763cdc8ec327d1bcf2018c55dc087c6784f947f674e4c72658d7887ca8f3e93b4953955c665984d1c0c749ad24e1620ea7862b7fac88fa5e82ce7289a285b96019e594161677318c37da4f7316e51353431771cdbdce6e7da5fb83560593d8f1363c6c0124525775c102b35079ec2d2c62ddd5"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x422}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "d0ddea14aedfde03fcabaa3f83c22ac7903aa5938ad580295f6d8b1e77bfea15f007b0967744640b0202558019ec686aae4004d3c9d8d17635093047567684d197a5682e1a045b4afb258b08e22306ebb0c24213f36529cd02c47e1e1e53c590aef1e69227"}}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) 05:58:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 292.188734][ T6084] Zero length message leads to an empty skb 05:58:16 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 05:58:16 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 05:58:16 executing program 2: semtimedop(0x0, &(0x7f00000002c0)=[{0x0, 0x9}], 0x1, 0x0) [ 292.216038][ T39] audit: type=1400 audit(1656395896.663:220): avc: denied { read } for pid=6091 comm="syz-executor.3" name="usbmon0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 05:58:16 executing program 0: r0 = socket(0x29, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 05:58:16 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000a80)) [ 292.232732][ T39] audit: type=1400 audit(1656395896.663:221): avc: denied { open } for pid=6091 comm="syz-executor.3" path="/dev/usbmon0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 292.249881][ T39] audit: type=1400 audit(1656395896.683:222): avc: denied { create } for pid=6093 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 292.262144][ T39] audit: type=1400 audit(1656395896.703:223): avc: denied { setopt } for pid=6095 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 292.463019][ T51] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 292.872993][ T51] usb 6-1: not running at top speed; connect to a high speed hub [ 292.963086][ T51] usb 6-1: config 9 has an invalid interface number: 64 but max is 0 [ 292.968612][ T51] usb 6-1: config 9 has no interface number 0 [ 292.972584][ T51] usb 6-1: config 9 interface 64 altsetting 6 has an invalid endpoint with address 0xAD, skipping [ 292.979670][ T51] usb 6-1: config 9 interface 64 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 292.986559][ T51] usb 6-1: config 9 interface 64 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 292.993832][ T51] usb 6-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 293.000704][ T51] usb 6-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 293.007625][ T51] usb 6-1: config 9 interface 64 has no altsetting 0 [ 293.173220][ T51] usb 6-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=3a.9c [ 293.179451][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.184699][ T51] usb 6-1: Product: ь [ 293.187212][ T51] usb 6-1: Manufacturer: ж [ 293.189962][ T51] usb 6-1: SerialNumber: 琺뗜毮䪇浶땷枭軋↖砡䣯泞邯≳樶࠰팹飂씁䊯ņ盂じ੢뀇걂ჯ폍Ḯᜤ닯鹨钫鑍᯶䚒蠮䷤牍ᑼ娡新㍟ᦀʣ쎤偒㱶軜⟃병Dz喌ࣜ杼濾⛇흘粈㯩卉岕奦톄쟀굉๢蚧缫袬建캂襲薢悹ᚔ眖谱獏匓ᝃ쵱캽絮ﮥ嚃錅㰶Ŭ判畗ˁ傳Ⱝ [ 293.233664][ T6086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.535000][ T51] option 6-1:9.64: GSM modem (1-port) converter detected [ 293.550258][ T51] usb 6-1: USB disconnect, device number 5 [ 293.555940][ T51] option 6-1:9.64: device disconnected 05:58:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23c18b3b5b97e8b1ac631f89015f3a10330934"}) 05:58:18 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000400)='Nwlan\x91\xfe5\x89\xf6\x06\x16\xa0\xbb\x95\xaf>%<\xeb\xda]\xfdL\xc2k\xaeh7\xec\xc7\b\xad}\xc6\xbf#\xb55\x02\x86\xf0\xbb`|w}\x98\xa0\x85\x14#N\x97\xe9p\x1d\xf8\xc3nQqu\x97\x80\xe1\x87\"\xd5\nH\xa0\x88\xc0\x1aw\x9bA\xd2]\x97\x02{\x19{o\xc5\xb1\x81\\\x9c~\xe7\xca\x13e(\xaa\xc7\x8d\xad\x1e\x17$3\x91dN\xb7 \xc5\x8e\x87\xd7\xeb!c\x8d0y\xe8b#-#\x9a\xba\xa7\x83\x11\xb1\xb0T\xc5&\x0e\x8a\xd6\x88\x95\xce\xb1\x13M~I\x00\x00\x00\x00\xa0\xd6\xcc\x95\xc4m\xff\x0e\x03\xff|fj\xad0\x83\xf8\xe3o\x11]7\'\xb7#\"\xe1G\xce\x06\xfa\xab\xba\x10\xba\xcf\xe9du\xc9ou\xf35\x8b\xd7g\xd5\xee4\xac\x03DZ\xa5\xeeh\xb8*Q\x1f\"\xaf\x00\xeb\xda\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x91Ld\x97\x93\xb3\xb0\xb0\x9e\xdes$\xf0\xc6\xf3Y:\x7f\xc1\x8c-\xfb\xdc\xfa)3\xd4G%\xbav\xe5c', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4d091, r0, 0x0) 05:58:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0x3, 0x4) 05:58:18 executing program 0: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 05:58:18 executing program 2: ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0xffff]}, 0x8) 05:58:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0eb7bcc8"}}) 05:58:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x200}) 05:58:18 executing program 0: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x9}, &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 05:58:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 05:58:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x2}, {0x9}]}) 05:58:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x0, {0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 05:58:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 05:58:18 executing program 2: syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) 05:58:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 05:58:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 05:58:18 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) 05:58:18 executing program 3: socketpair(0x2c, 0x3, 0x1, &(0x7f00000007c0)) 05:58:18 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:58:18 executing program 2: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{}, {}], 0x2, &(0x7f0000000440)) 05:58:18 executing program 1: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 05:58:18 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 05:58:18 executing program 0: socketpair(0xa, 0x805, 0x20, &(0x7f00000002c0)) 05:58:18 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x2, 0x3cd, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x30, 0x31, 0x5d, 0x10, 0x257a, 0x260b, 0x3a9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3bb, 0x1, 0x9, 0x4, 0x0, 0x95, [{{0x9, 0x4, 0x40, 0x6, 0x9, 0x72, 0xbe, 0xda, 0xb2, [@generic={0xf9, 0xb, "303bdf9f4284ad7124d3e30cf8d505d6800c66b1e27fc59daf7e2339f311551b8bf8443719032b2d66968307158be68a7dd51620fe9c12027ae5d3a7bbc88977a9db8d665affeda589c5dbc0ad310c7425050cf5d452ab519e3fda4f1e4409c5ef08ef35bd2ca99ff0665ed33272d6d5708318592992b1eb9afbfbeefd0b3c0c2eb405ec722c34604c1deac206f1bc5b1c240ac3e8dd1bc10baf4daa51c1d21146bfc6446db2c5445856e16828b00d9fa1384e44b5f85d8bf49e23864d86d9760ceab965419198f639e131fdf014cc10f71098260b6deed5002628aea84068cb439922c52adb8788a25ef457fa587bfe925dc2cfb1c8c9"}], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x92, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8150ff43fdf179ad, 0x10, 0x8, 0x3b, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x1, 0x5, [@generic={0x62, 0xf, "b74efe576434d62ba9092319b6a485d3acc20ddae7a7bc6d7bc7bc0bed9643fb00ebe74cbbe9d897c2fa989d9d189731d6ae97c72c2ffe34db208f5adba15fdb1111f0529d8c19972ecbde20c1c569ebc7d11638a0a78877b23067c4515ae369"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x918ef499748e27d4, 0x40, 0x3, 0x2, 0x1}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x80, 0x6, 0x1f, [@generic={0xf4, 0x23, "b5e19df75dd99bc3ec106af6ccb13ec4d129aedd426903879d6aafaccb0f09214efb28f850c55c2565954a90fb2bf82617fbe18aa732db49d42960be79f895154fa802ee1eaa2ffd443cda7b0f23db3ab0b8017016cb45f342891323852c7403645a0929d6faa862f405c3cadc71b115ca1c65e9171ab7236ac0c9b5d1d65b6b6415126b48ad9494998c16a26ee2dc4ccc18a22b693c6dad459da751976d2e155c6075f7b2efd78e6e6c162bbdd817d5fee5143b3cf688bda5b983947717af455c08930c10622a259f0e5ad4bb23a58a245943119de549fc26966d90d0d6f9d898ebf1ae387c439859512a80096e4fe2706a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7f, 0x20, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0xbc80522ba31ae006, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x1c, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1f, 0x84, 0x3, [@generic={0xdf, 0x22, "924a338b1e01d5098d32f33fc3edcab3fe7dbb538f02f9027654e8b484805f636a2e359f5506a900c83d3640308253ead1ba238e1f322d40259e86717fa1c0289664b1821f7a169c055ec33cf15120a7f089f9e2d735d2f75ef58520bf189b475c3f7d6ae08e94bd4d05470caa98178cdc11fa45697dfe58f223a943bbfcab36236fbeb16fcf6773a078326b6362b54ba9260fe2cef43b229d24164a5bc076f7cd80a1a7785b797577bf34fde75b00036965f38af344a84ab3b93879cc52c85ce78e54e590625252230d59c41a5cb6bb61b971d535f733a4a39a0403a6"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x1c, 0x2, 0x0, 0x8, 0x2}, 0xc5, &(0x7f0000000700)={0x5, 0xf, 0xc5, 0x2, [@generic={0x55, 0x10, 0x4, "9c8b149929ec535d6219a937fd92f5be1c349fe07d1be2a46aa9ba1d6c371d9e865adbcbc88041a0e8039b3d995453d9ae135fa0b7ea5c4ef75c9fda85c346d808eccfd585f7daa9350f51a40a7175effaca"}, @generic={0x6b, 0x10, 0xa, "be909c17781a97d6c8e0a464d38a7b43b8b95c5b601cc8cd3da2b135550be24ec6fb7f8991391391f583ce0e606deaeb1300cdf2a2b275d2b197bb144b144d0201d6c4546c21d99459d860848af9b5b920726ea1bd337609440f7ea9df616d569d4f78f3ae335c03"}]}, 0x6, [{0xd9, &(0x7f0000000800)=@string={0xd9, 0x3, "dad2604a44edcdb0311761e1a160ddfbd4aa350907dabbbf75f8e45843c026501ad71d37e7945ed388e1e4e87ef121dcb1c62df72ce6662e51b9fa15adbe33effd2419ce34fe0d7406379fd2e307d28434e056adf1703dc9f6277a15bdceb34c023514938c0a8b546d9869be3b7ea1fcbf4922c5f1e56715ae7a188c93f52c25348effd5eebcdaa5789eb16220b883f9aa0b19dfd7feb139ddc57d677360282e3719cf34e485ccfc9af639330fd9042990244480f7929b919f1cb80f5cd4c3743d0f8eeb9906fb10dbd4ba8ce8809180e80088185f912e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44c}}, {0xdf, &(0x7f0000000980)=@string={0xdf, 0x3, "3a74dcb518deee6b874a766d77b5ad67cb8e96212178ef48de6caf907322366a300839d3c29801c5af424601c276583012e6620a07b042acef10cdd32e1e241780ecefb2d9e4689eab944d94f61b92462e88e44d4d727c14215a11e0b0655f33801915e1a302a4c35250763cdc8ec327d1bcf2018c55dc087c6784f947f674e4c72658d7887ca8f3e93b4953955c665984d1c0c749ad24e1620ea7862b7fac88fa5e82ce7289a285b96019e594161677318c37da4f7316e51353431771cdbdce6e7da5fb83560593d8f1363c6c0124525775c102b35079ec2d2c62ddd5"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x422}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "d0ddea14aedfde03fcabaa3f83c22ac7903aa5938ad580295f6d8b1e77bfea15f007b0967744640b0202558019ec686aae4004d3c9d8d17635093047567684d197a5682e1a045b4afb258b08e22306ebb0c24213f36529cd02c47e1e1e53c590aef1e69227"}}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20) 05:58:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}) 05:58:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x1ff, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:58:18 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x2, 0x241, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x30, 0x31, 0x5d, 0x10, 0x257a, 0x260b, 0x3a9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22f, 0x1, 0x9, 0x4, 0x0, 0x95, [{{0x9, 0x4, 0x40, 0x6, 0x8, 0x72, 0xbe, 0xda, 0xb2, [@generic={0xf8, 0xb, "303bdf9f4284ad7124d3e30cf8d505d6800c66b1e27fc59daf7e2339f311551b8bf8443719032b2d66968307158be68a7dd51620fe9c12027ae5d3a7bbc88977a9db8d665affeda589c5dbc0ad310c7425050cf5d452ab519e3fda4f1e4409c5ef08ef35bd2ca99ff0665ed33272d6d5708318592992b1eb9afbfbeefd0b3c0c2eb405ec722c34604c1deac206f1bc5b1c240ac3e8dd1bc10baf4daa51c1d21146bfc6446db2c5445856e16828b00d9fa1384e44b5f85d8bf49e23864d86d9760ceab965419198f639e131fdf014cc10f71098260b6deed5002628aea84068cb439922c52adb8788a25ef457fa587bfe925dc2cfb1c8"}], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x92, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8150ff43fdf179ad, 0x10, 0x8, 0x3b, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x1, 0x5, [@generic={0x2, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x80, 0x6, 0x0, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x7f, 0x20, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0xbc80522ba31ae006, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1c, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x0, 0x84, 0x3, [@generic={0xa8, 0x22, "924a338b1e01d5098d32f33fc3edcab3fe7dbb538f02f9027654e8b484805f636a2e359f5506a900c83d3640308253ead1ba238e1f322d40259e86717fa1c0289664b1821f7a169c055ec33cf15120a7f089f9e2d735d2f75ef58520bf189b475c3f7d6ae08e94bd4d05470caa98178cdc11fa45697dfe58f223a943bbfcab36236fbeb16fcf6773a078326b6362b54ba9260fe2cef43b229d24164a5bc076f7cd80a1a7785b"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x1c, 0x2, 0x0, 0x8}, 0xbf, &(0x7f0000000700)={0x5, 0xf, 0xbf, 0x2, [@generic={0x55, 0x10, 0x4, "9c8b149929ec535d6219a937fd92f5be1c349fe07d1be2a46aa9ba1d6c371d9e865adbcbc88041a0e8039b3d995453d9ae135fa0b7ea5c4ef75c9fda85c346d808eccfd585f7daa9350f51a40a7175effaca"}, @generic={0x65, 0x10, 0xa, "be909c17781a97d6c8e0a464d38a7b43b8b95c5b601cc8cd3da2b135550be24ec6fb7f8991391391f583ce0e606deaeb1300cdf2a2b275d2b197bb144b144d0201d6c4546c21d99459d860848af9b5b920726ea1bd337609440f7ea9df616d569d4f"}]}, 0x5, [{0xd9, &(0x7f0000000800)=@string={0xd9, 0x3, "dad2604a44edcdb0311761e1a160ddfbd4aa350907dabbbf75f8e45843c026501ad71d37e7945ed388e1e4e87ef121dcb1c62df72ce6662e51b9fa15adbe33effd2419ce34fe0d7406379fd2e307d28434e056adf1703dc9f6277a15bdceb34c023514938c0a8b546d9869be3b7ea1fcbf4922c5f1e56715ae7a188c93f52c25348effd5eebcdaa5789eb16220b883f9aa0b19dfd7feb139ddc57d677360282e3719cf34e485ccfc9af639330fd9042990244480f7929b919f1cb80f5cd4c3743d0f8eeb9906fb10dbd4ba8ce8809180e80088185f912e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44c}}, {0xdf, &(0x7f0000000980)=@string={0xdf, 0x3, "3a74dcb518deee6b874a766d77b5ad67cb8e96212178ef48de6caf907322366a300839d3c29801c5af424601c276583012e6620a07b042acef10cdd32e1e241780ecefb2d9e4689eab944d94f61b92462e88e44d4d727c14215a11e0b0655f33801915e1a302a4c35250763cdc8ec327d1bcf2018c55dc087c6784f947f674e4c72658d7887ca8f3e93b4953955c665984d1c0c749ad24e1620ea7862b7fac88fa5e82ce7289a285b96019e594161677318c37da4f7316e51353431771cdbdce6e7da5fb83560593d8f1363c6c0124525775c102b35079ec2d2c62ddd5"}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "d0ddea14aedfde03fcabaa3f83c22ac7903aa5938ad580295f6d8b1e77bfea15f007b0967744640b0202558019ec686aae4004d3c9d8d17635093047567684d197a5682e1a045b4afb258b08e22306ebb0c24213f36529cd02c47e1e1e53c590aef1e69227"}}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/39, 0x27}], 0x2, &(0x7f0000000180)=""/154, 0x9a}, 0x20) 05:58:18 executing program 0: semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x1000}, {0x1, 0x80}, {}], 0x3, &(0x7f0000000440)) 05:58:18 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x4cd83, 0x0) 05:58:18 executing program 0: semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0xe6e9}, {}], 0x2, 0x0) 05:58:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0x4020940d, 0x0) [ 294.393028][ T3754] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 294.493196][ T3758] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 294.793124][ T3754] usb 6-1: not running at top speed; connect to a high speed hub [ 294.873238][ T3754] usb 6-1: config 9 has an invalid interface number: 64 but max is 0 [ 294.881005][ T3754] usb 6-1: config 9 has no interface number 0 [ 294.885401][ T3754] usb 6-1: config 9 interface 64 altsetting 6 has an invalid endpoint with address 0xAD, skipping [ 294.891901][ T3754] usb 6-1: config 9 interface 64 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 294.899031][ T3754] usb 6-1: config 9 interface 64 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 294.906338][ T3758] usb 7-1: not running at top speed; connect to a high speed hub [ 294.911277][ T3754] usb 6-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 294.917996][ T3754] usb 6-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 294.924906][ T3754] usb 6-1: config 9 interface 64 has no altsetting 0 [ 294.983039][ T3758] usb 7-1: config 9 has an invalid interface number: 64 but max is 0 [ 294.988313][ T3758] usb 7-1: config 9 has no interface number 0 [ 294.992182][ T3758] usb 7-1: config 9 interface 64 altsetting 6 has an invalid endpoint with address 0xAD, skipping [ 294.998791][ T3758] usb 7-1: config 9 interface 64 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 295.005753][ T3758] usb 7-1: config 9 interface 64 altsetting 6 endpoint 0x2 has invalid wMaxPacketSize 0 [ 295.011715][ T3758] usb 7-1: config 9 interface 64 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 295.018477][ T3758] usb 7-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 295.024939][ T3758] usb 7-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 295.031292][ T3758] usb 7-1: config 9 interface 64 has no altsetting 0 [ 295.083103][ T3754] usb 6-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=3a.9c [ 295.088621][ T3754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.093999][ T3754] usb 6-1: Product: ь [ 295.096269][ T3754] usb 6-1: Manufacturer: ж [ 295.099303][ T3754] usb 6-1: SerialNumber: 琺뗜毮䪇浶땷枭軋↖砡䣯泞邯≳樶࠰팹飂씁䊯ņ盂じ੢뀇걂ჯ폍Ḯᜤ닯鹨钫鑍᯶䚒蠮䷤牍ᑼ娡新㍟ᦀʣ쎤偒㱶軜⟃병Dz喌ࣜ杼濾⛇흘粈㯩卉岕奦톄쟀굉๢蚧缫袬建캂襲薢悹ᚔ眖谱獏匓ᝃ쵱캽絮ﮥ嚃錅㰶Ŭ判畗ˁ傳Ⱝ [ 295.133956][ T6145] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.193174][ T3758] usb 7-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=3a.9c [ 295.200298][ T3758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.205474][ T3758] usb 7-1: Product: ь [ 295.208020][ T3758] usb 7-1: Manufacturer: ж [ 295.210869][ T3758] usb 7-1: SerialNumber: 琺뗜毮䪇浶땷枭軋↖砡䣯泞邯≳樶࠰팹飂씁䊯ņ盂じ੢뀇걂ჯ폍Ḯᜤ닯鹨钫鑍᯶䚒蠮䷤牍ᑼ娡新㍟ᦀʣ쎤偒㱶軜⟃병Dz喌ࣜ杼濾⛇흘粈㯩卉岕奦톄쟀굉๢蚧缫袬建캂襲薢悹ᚔ眖谱獏匓ᝃ쵱캽絮ﮥ嚃錅㰶Ŭ判畗ˁ傳Ⱝ [ 295.436020][ T3754] option 6-1:9.64: GSM modem (1-port) converter detected [ 295.444758][ T3754] usb 6-1: USB disconnect, device number 6 [ 295.451401][ T3754] option 6-1:9.64: device disconnected [ 295.543907][ T3758] option 7-1:9.64: GSM modem (1-port) converter detected [ 295.550656][ T3758] usb 7-1: USB disconnect, device number 6 [ 295.557863][ T3758] option 7-1:9.64: device disconnected 05:58:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0xfffffff9, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x1, 0x1, 0x10001, 0x7}}) 05:58:20 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) 05:58:20 executing program 0: open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x200a00, 0x0) 05:58:20 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x1) 05:58:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 05:58:20 executing program 1: request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffffa) 05:58:20 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) 05:58:20 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 05:58:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) 05:58:20 executing program 2: semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0xe6e9, 0x1000}], 0x1, &(0x7f0000000440)) 05:58:20 executing program 0: r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xed, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x81, 0x1, {0x22, 0x994}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x9, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x0, 0x1}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x0, 0x0, 0x2c, 0xca, 0x0, 0x8}, 0x24, &(0x7f0000000880)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x17, 0x0, 0x6a, 0x8, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0xfc, 0x2, 0x100, 0xff0f, 0x0, [0xf, 0xc0]}]}, 0x2, [{0xf7, &(0x7f0000000900)=@string={0xf7, 0x3, "c2f5d04fd46330f680e65470346abe4db4cad10bcea7a4ce11bb3c0a7bb0aadd376b8c7f40e636c79cc65f20333bf0624fb86e3e96bcaad9286ba3eb27cfb28a642d33d486a6e92ae77fa21fa7b494191057eeaf35b440522a6aedfa97fc6ea0ca5b8ffd8e3ebbf55ab1bac078e144cb332ef2a34ac6805c7d5d0fb6f6898edfcf9cf9f42ae80ec1b8d4b15baeee2fb4fd23943670d9bdc2c4e084db63081691e152ae355bc0d86668ddb6326cb84312bdc6c9bbb2bcf82ed4fa1cc72bf0b677f43bb82f179d459b03733d9c89f9ddbd39f9c14cc9da74bd23a4511d8d7ad482b5cf05d0fb006f333212e9aaa1055a7fabd7146ddd"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x430}}]}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x5c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40814}, 0x40000) syz_usb_control_io(r0, &(0x7f0000001680)={0x2c, &(0x7f00000014c0)={0x0, 0x11, 0x91, {0x91, 0x11, "60d9dc07374037ad50b682984baddf90ff2709d2dd03a3d1b0ea1f78ba4286a3c2db7c92530d54b73b794a864bc7474e249314a90f0ef4914cf3d6151d06127d9587bfccf79f44bb126ed5db44ebefcf29987d3223767cb9d6af09de31de0a9ab817ff882a01c6e8c85b8eca261345aa10bd6df4109b337e93d96be159a39c2e037e16e8183c91511b1491debbb15b"}}, &(0x7f0000001580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f00000015c0)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "20344cf084506be1a70392b2b4a1b5b5"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "75cc036b188ff48ad1a5bbf4171467f1"}]}}, 0x0, &(0x7f0000001640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xfe, 0x8, 0x23, 0x1000, 0x82}}}, &(0x7f0000001b80)={0x84, &(0x7f00000016c0)={0x20, 0x14, 0xc6, "456e4f38c9e8d1ddcbd0c3ef30343404344ea820be84c09e1fc10f30b40d591adcba427b7df54a686992a09ecf0d72c6a6d0ad89c5b4c5c793f5678f992c865d144aa77ea0d51e940d1cd8a2b342e7d20cfdecba7817c08533e0a34d4a7435164400e6568a7145e2dde35ef58f3af3e6f720c87aa785e449d4003c35faa3a0c9e0d5b15ba9467e48588ed1ce148fb3b82529bfb766f47f6335ebc1ec086ec941fe24330cb9c7432e7630acb319e8ff8ceefc1571aa602599bfb7d3dab6cdd241c31dc34c5148"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x7, 0x2}}, &(0x7f0000001880)={0x20, 0x0, 0x8, {0xa0, 0x8, [0x0]}}, &(0x7f00000018c0)={0x40, 0x7, 0x2, 0x4f}, &(0x7f0000001900)={0x40, 0x9, 0x1, 0xd1}, &(0x7f0000001940)={0x40, 0xb, 0x2, "aae5"}, &(0x7f0000001980)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000019c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001a40)={0x40, 0x19, 0x2, "1f50"}, &(0x7f0000001a80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0x56}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x4}}) syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), 0xffffffffffffffff) 05:58:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="630440"], 0x0, 0x0, 0x0}) 05:58:20 executing program 3: syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x4001) 05:58:20 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(0x0, 0x0, &(0x7f0000000080)={r0}, 0x0, 0x0) [ 296.047038][ T6184] binder: 6183:6184 unknown command 4195427 [ 296.052495][ T6184] binder: 6183:6184 ioctl c0306201 20000140 returned -22 05:58:20 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x3, 0x0, 0x0, 0x4]) 05:58:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000100)=[@acquire, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000001c0)="ee"}) 05:58:20 executing program 2: clock_gettime(0x0, &(0x7f0000000100)={0x0}) pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={r0}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 05:58:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'erspan0\x00', 0x0}) [ 296.096299][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 296.096312][ T39] audit: type=1400 audit(1656395900.543:229): avc: denied { ioctl } for pid=6194 comm="syz-executor.3" path="socket:[38725]" dev="sockfs" ino=38725 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 296.293054][ T3758] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 296.494339][ T3758] usb 5-1: device descriptor read/64, error 18 [ 296.763609][ T3758] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 296.952973][ T3758] usb 5-1: device descriptor read/64, error 18 [ 297.074200][ T3758] usb usb5-port1: attempt power cycle [ 297.482963][ T3758] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 297.593679][ T3758] usb 5-1: Invalid ep0 maxpacket: 0 [ 297.743102][ T3758] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 297.833207][ T3758] usb 5-1: Invalid ep0 maxpacket: 0 [ 297.838659][ T3758] usb usb5-port1: unable to enumerate USB device 05:58:23 executing program 0: renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 05:58:23 executing program 3: r0 = io_uring_setup(0x51, &(0x7f0000000000)={0x0, 0x22da}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) 05:58:23 executing program 1: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 05:58:23 executing program 2: setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) 05:58:23 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x149001, 0x0) io_uring_setup(0x7a3a, &(0x7f0000000000)={0x0, 0x0, 0x4}) io_uring_setup(0xd4b, &(0x7f0000000080)={0x0, 0x0, 0x2}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 05:58:23 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 05:58:23 executing program 2: futimesat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) 05:58:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, 0x0) 05:58:23 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @sdr}) 05:58:23 executing program 2: io_uring_setup(0x7a3a, &(0x7f0000000000)) io_uring_setup(0xd4b, &(0x7f0000000080)) 05:58:24 executing program 1: bind$phonet(0xffffffffffffffff, 0x0, 0x0) 05:58:24 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@mmap={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0eb7bcc8"}}) 05:58:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) 05:58:24 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4}, {r0}, {r1}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x5]}, 0x8) 05:58:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:58:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x73, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="086310400072db5b8b0000d600f96a78f4a3ea8d16"], 0x0, 0x0, 0x0}) 05:58:24 executing program 3: ppoll(&(0x7f0000000040)=[{}, {}], 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 05:58:24 executing program 1: r0 = io_uring_setup(0x7a3a, &(0x7f0000000000)={0x0, 0x679f, 0x4, 0x200002, 0x14c}) io_uring_setup(0xd4b, &(0x7f0000000080)={0x0, 0x7548, 0x2, 0x3, 0x9b, 0x0, r0}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) inotify_init1(0x800) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {}, {0x20, '/dev/nvram\x00'}], 0xa, "90643a854201b77a2f700535334ed52fb24cd45bb606"}, 0x38) [ 299.576812][ T6228] binder: 6227:6228 unknown command 22 [ 299.579980][ T6228] binder: 6227:6228 ioctl c0306201 200015c0 returned -22 05:58:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1cf0"], 0x1c}}, 0x0) 05:58:24 executing program 2: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000005c0)=""/224) 05:58:24 executing program 1: semtimedop(0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x0) 05:58:24 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)) 05:58:24 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 05:58:24 executing program 0: syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) 05:58:24 executing program 3: timer_create(0x0, 0x0, &(0x7f00000001c0)) 05:58:24 executing program 1: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x1eb3, &(0x7f0000000080)={0x0, 0x233, 0x4}) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) 05:58:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000001c0)=""/171) 05:58:24 executing program 0: io_uring_setup(0x0, &(0x7f0000000000)) 05:58:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}}, 0x0) 05:58:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x10, 0x0, &(0x7f0000000500)=[@enter_looper, @free_buffer], 0x0, 0x0, 0x0}) 05:58:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x10, 0x0, &(0x7f0000000080)=[@free_buffer, @exit_looper], 0x0, 0x0, 0x0}) 05:58:24 executing program 1: ppoll(&(0x7f0000000040)=[{}, {}], 0x2, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0xffff]}, 0x8) 05:58:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f, 0x0, "23c18b3b5b97e8b1ac631f89015f3a10330934"}) 05:58:24 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) write(r0, 0x0, 0x0) 05:58:24 executing program 3: semtimedop(0x0, &(0x7f00000003c0)=[{}, {0x1}], 0x2, 0x0) 05:58:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) [ 299.736333][ T39] audit: type=1400 audit(1656395904.183:230): avc: denied { write } for pid=6265 comm="syz-executor.0" path="socket:[41131]" dev="sockfs" ino=41131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 05:58:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xeb1a, 0x1, {0x1, @win={{}, 0x0, 0x10000, 0x0, 0x0, 0x0}}}) 05:58:24 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1) 05:58:24 executing program 0: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) [ 299.769167][ T39] audit: type=1400 audit(1656395904.213:231): avc: denied { create } for pid=6272 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 05:58:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) 05:58:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x3}) 05:58:24 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed801, 0x0) [ 299.790697][ T39] audit: type=1400 audit(1656395904.223:232): avc: denied { unlink } for pid=3718 comm="syz-executor.2" name="file0" dev="sda1" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 05:58:25 executing program 3: getitimer(0xd8a0b305676a085, 0x0) 05:58:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xeb1a, 0x0, {0x1, @win={{}, 0x0, 0x10000, 0x0, 0x0, 0x0}}}) 05:58:25 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000c00), 0x494502, 0x0) 05:58:25 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x5}]}) 05:58:25 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000300)) 05:58:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x24}}, 0x0) 05:58:25 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "6fb5f31bded243b6637f403a92c5e5a1f26d4615a6361ca53c5ad1a4cfafd820"}) 05:58:25 executing program 0: socketpair(0x0, 0x2, 0x1000, &(0x7f0000000000)) socket$igmp6(0xa, 0x3, 0x2) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) socket$l2tp(0x2, 0x2, 0x73) [ 300.619727][ T39] audit: type=1400 audit(1656395905.063:233): avc: denied { create } for pid=6293 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 05:58:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2}]}) 05:58:25 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 05:58:25 executing program 2: semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 05:58:25 executing program 1: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x280001, 0x0) 05:58:25 executing program 3: io_uring_setup(0x7a3a, &(0x7f0000000000)={0x0, 0x0, 0x4}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 05:58:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) 05:58:25 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)) 05:58:25 executing program 0: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x0, 0x1000}, {}, {}], 0x3, &(0x7f0000000440)) 05:58:25 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000040)=[@clear_death], 0x0, 0x0, 0x0}) 05:58:25 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, 0x0) 05:58:25 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004440)) syz_usb_connect(0x2, 0x3d4, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x30, 0x31, 0x5d, 0x10, 0x257a, 0x260b, 0x3a9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c2, 0x1, 0x9, 0x4, 0x0, 0x95, [{{0x9, 0x4, 0x40, 0x6, 0x9, 0x72, 0xbe, 0xda, 0xb2, [@generic={0xf9, 0xb, "303bdf9f4284ad7124d3e30cf8d505d6800c66b1e27fc59daf7e2339f311551b8bf8443719032b2d66968307158be68a7dd51620fe9c12027ae5d3a7bbc88977a9db8d665affeda589c5dbc0ad310c7425050cf5d452ab519e3fda4f1e4409c5ef08ef35bd2ca99ff0665ed33272d6d5708318592992b1eb9afbfbeefd0b3c0c2eb405ec722c34604c1deac206f1bc5b1c240ac3e8dd1bc10baf4daa51c1d21146bfc6446db2c5445856e16828b00d9fa1384e44b5f85d8bf49e23864d86d9760ceab965419198f639e131fdf014cc10f71098260b6deed5002628aea84068cb439922c52adb8788a25ef457fa587bfe925dc2cfb1c8c9"}], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x92, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8150ff43fdf179ad, 0x10, 0x8, 0x3b, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x1, 0x5, [@generic={0x62, 0xf, "b74efe576434d62ba9092319b6a485d3acc20ddae7a7bc6d7bc7bc0bed9643fb00ebe74cbbe9d897c2fa989d9d189731d6ae97c72c2ffe34db208f5adba15fdb1111f0529d8c19972ecbde20c1c569ebc7d11638a0a78877b23067c4515ae369"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x918ef499748e27d4, 0x40, 0x3, 0x2, 0x1}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x80, 0x6, 0x1f, [@generic={0xf4, 0x23, "b5e19df75dd99bc3ec106af6ccb13ec4d129aedd426903879d6aafaccb0f09214efb28f850c55c2565954a90fb2bf82617fbe18aa732db49d42960be79f895154fa802ee1eaa2ffd443cda7b0f23db3ab0b8017016cb45f342891323852c7403645a0929d6faa862f405c3cadc71b115ca1c65e9171ab7236ac0c9b5d1d65b6b6415126b48ad9494998c16a26ee2dc4ccc18a22b693c6dad459da751976d2e155c6075f7b2efd78e6e6c162bbdd817d5fee5143b3cf688bda5b983947717af455c08930c10622a259f0e5ad4bb23a58a245943119de549fc26966d90d0d6f9d898ebf1ae387c439859512a80096e4fe2706a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7f, 0x20, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0xbc80522ba31ae006, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x1c, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1f, 0x84, 0x3, [@generic={0xdf, 0x22, "924a338b1e01d5098d32f33fc3edcab3fe7dbb538f02f9027654e8b484805f636a2e359f5506a900c83d3640308253ead1ba238e1f322d40259e86717fa1c0289664b1821f7a169c055ec33cf15120a7f089f9e2d735d2f75ef58520bf189b475c3f7d6ae08e94bd4d05470caa98178cdc11fa45697dfe58f223a943bbfcab36236fbeb16fcf6773a078326b6362b54ba9260fe2cef43b229d24164a5bc076f7cd80a1a7785b797577bf34fde75b00036965f38af344a84ab3b93879cc52c85ce78e54e590625252230d59c41a5cb6bb61b971d535f733a4a39a0403a6"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x1c, 0x2, 0x0, 0x8, 0x2}, 0xc5, &(0x7f0000000700)={0x5, 0xf, 0xc5, 0x2, [@generic={0x55, 0x10, 0x4, "9c8b149929ec535d6219a937fd92f5be1c349fe07d1be2a46aa9ba1d6c371d9e865adbcbc88041a0e8039b3d995453d9ae135fa0b7ea5c4ef75c9fda85c346d808eccfd585f7daa9350f51a40a7175effaca"}, @generic={0x6b, 0x10, 0xa, "be909c17781a97d6c8e0a464d38a7b43b8b95c5b601cc8cd3da2b135550be24ec6fb7f8991391391f583ce0e606deaeb1300cdf2a2b275d2b197bb144b144d0201d6c4546c21d99459d860848af9b5b920726ea1bd337609440f7ea9df616d569d4f78f3ae335c03"}]}, 0x6, [{0xd9, &(0x7f0000000800)=@string={0xd9, 0x3, "dad2604a44edcdb0311761e1a160ddfbd4aa350907dabbbf75f8e45843c026501ad71d37e7945ed388e1e4e87ef121dcb1c62df72ce6662e51b9fa15adbe33effd2419ce34fe0d7406379fd2e307d28434e056adf1703dc9f6277a15bdceb34c023514938c0a8b546d9869be3b7ea1fcbf4922c5f1e56715ae7a188c93f52c25348effd5eebcdaa5789eb16220b883f9aa0b19dfd7feb139ddc57d677360282e3719cf34e485ccfc9af639330fd9042990244480f7929b919f1cb80f5cd4c3743d0f8eeb9906fb10dbd4ba8ce8809180e80088185f912e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44c}}, {0xdf, &(0x7f0000000980)=@string={0xdf, 0x3, "3a74dcb518deee6b874a766d77b5ad67cb8e96212178ef48de6caf907322366a300839d3c29801c5af424601c276583012e6620a07b042acef10cdd32e1e241780ecefb2d9e4689eab944d94f61b92462e88e44d4d727c14215a11e0b0655f33801915e1a302a4c35250763cdc8ec327d1bcf2018c55dc087c6784f947f674e4c72658d7887ca8f3e93b4953955c665984d1c0c749ad24e1620ea7862b7fac88fa5e82ce7289a285b96019e594161677318c37da4f7316e51353431771cdbdce6e7da5fb83560593d8f1363c6c0124525775c102b35079ec2d2c62ddd5"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x422}}, {0x67, &(0x7f0000000ac0)=@string={0x67, 0x3, "d0ddea14aedfde03fcabaa3f83c22ac7903aa5938ad580295f6d8b1e77bfea15f007b0967744640b0202558019ec686aae4004d3c9d8d17635093047567684d197a5682e1a045b4afb258b08e22306ebb0c24213f36529cd02c47e1e1e53c590aef1e69227"}}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000000c0)=""/31, 0x1f}], 0x3, &(0x7f0000000180)=""/154, 0x9a}, 0x20) 05:58:25 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0x81) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) 05:58:25 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x84880, 0x0) 05:58:25 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 05:58:25 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0), 0x10) [ 301.003057][ T51] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 301.423109][ T51] usb 7-1: not running at top speed; connect to a high speed hub [ 301.503134][ T51] usb 7-1: config 9 has an invalid interface number: 64 but max is 0 [ 301.509622][ T51] usb 7-1: config 9 has no interface number 0 [ 301.514844][ T51] usb 7-1: config 9 interface 64 altsetting 6 has an invalid endpoint with address 0xAD, skipping [ 301.521818][ T51] usb 7-1: config 9 interface 64 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 301.529034][ T51] usb 7-1: config 9 interface 64 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 301.535895][ T51] usb 7-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 301.542340][ T51] usb 7-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 301.548920][ T51] usb 7-1: config 9 interface 64 has no altsetting 0 [ 301.723558][ T51] usb 7-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=3a.9c [ 301.736118][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.743276][ T51] usb 7-1: Product: ь [ 301.747071][ T51] usb 7-1: Manufacturer: ж [ 301.750826][ T51] usb 7-1: SerialNumber: 琺뗜毮䪇浶땷枭軋↖砡䣯泞邯≳樶࠰팹飂씁䊯ņ盂じ੢뀇걂ჯ폍Ḯᜤ닯鹨钫鑍᯶䚒蠮䷤牍ᑼ娡新㍟ᦀʣ쎤偒㱶軜⟃병Dz喌ࣜ杼濾⛇흘粈㯩卉岕奦톄쟀굉๢蚧缫袬建캂襲薢悹ᚔ眖谱獏匓ᝃ쵱캽絮ﮥ嚃錅㰶Ŭ判畗ˁ傳Ⱝ [ 301.794191][ T6320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 302.094171][ T51] option 7-1:9.64: GSM modem (1-port) converter detected [ 302.102381][ T51] usb 7-1: USB disconnect, device number 7 [ 302.109044][ T51] option 7-1:9.64: device disconnected 05:58:26 executing program 3: io_uring_setup(0xd4b, &(0x7f0000000080)) 05:58:26 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0x81) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) 05:58:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x2}, {}]}) 05:58:26 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101603, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00'}) 05:58:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x19, 0x4) 05:58:26 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x84880, 0x0) 05:58:27 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x420}, 0x420}}, 0x0) [ 302.549539][ T39] audit: type=1400 audit(1656395906.993:234): avc: denied { append } for pid=6339 comm="syz-executor.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 05:58:27 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x614001}, 0x18) 05:58:27 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80a00, 0x0) [ 302.573102][ T39] audit: type=1400 audit(1656395907.013:235): avc: denied { create } for pid=6341 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.589939][ T39] audit: type=1400 audit(1656395907.013:236): avc: denied { setopt } for pid=6341 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 05:58:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r0) fanotify_mark(r0, 0x11, 0x10000000, 0xffffffffffffffff, 0x0) 05:58:27 executing program 3: futimesat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) 05:58:27 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 05:58:27 executing program 1: ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 05:58:27 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)) 05:58:27 executing program 1: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 05:58:27 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004440)) syz_usb_connect(0x2, 0x26c, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x30, 0x31, 0x5d, 0x10, 0x257a, 0x260b, 0x3a9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25a, 0x1, 0x9, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x40, 0x6, 0x9, 0x72, 0xbe, 0xda, 0xb2, [@generic={0xf9, 0xb, "303bdf9f4284ad7124d3e30cf8d505d6800c66b1e27fc59daf7e2339f311551b8bf8443719032b2d66968307158be68a7dd51620fe9c12027ae5d3a7bbc88977a9db8d665affeda589c5dbc0ad310c7425050cf5d452ab519e3fda4f1e4409c5ef08ef35bd2ca99ff0665ed33272d6d5708318592992b1eb9afbfbeefd0b3c0c2eb405ec722c34604c1deac206f1bc5b1c240ac3e8dd1bc10baf4daa51c1d21146bfc6446db2c5445856e16828b00d9fa1384e44b5f85d8bf49e23864d86d9760ceab965419198f639e131fdf014cc10f71098260b6deed5002628aea84068cb439922c52adb8788a25ef457fa587bfe925dc2cfb1c8c9"}], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8150ff43fdf179ad, 0x10, 0x8, 0x3b, 0x80, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xff, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x918ef499748e27d4, 0x40, 0x3, 0x2}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x80, 0x6, 0x1f, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x7f, 0x20, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1c, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1f, 0x84, 0x3, [@generic={0xd2, 0x22, "924a338b1e01d5098d32f33fc3edcab3fe7dbb538f02f9027654e8b484805f636a2e359f5506a900c83d3640308253ead1ba238e1f322d40259e86717fa1c0289664b1821f7a169c055ec33cf15120a7f089f9e2d735d2f75ef58520bf189b475c3f7d6ae08e94bd4d05470caa98178cdc11fa45697dfe58f223a943bbfcab36236fbeb16fcf6773a078326b6362b54ba9260fe2cef43b229d24164a5bc076f7cd80a1a7785b797577bf34fde75b00036965f38af344a84ab3b93879cc52c85ce78e54e590625252230d59c41a5cb6bb"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x1c, 0x2, 0x0, 0x8}, 0xc5, &(0x7f0000000700)={0x5, 0xf, 0xc5, 0x2, [@generic={0x55, 0x10, 0x4, "9c8b149929ec535d6219a937fd92f5be1c349fe07d1be2a46aa9ba1d6c371d9e865adbcbc88041a0e8039b3d995453d9ae135fa0b7ea5c4ef75c9fda85c346d808eccfd585f7daa9350f51a40a7175effaca"}, @generic={0x6b, 0x10, 0xa, "be909c17781a97d6c8e0a464d38a7b43b8b95c5b601cc8cd3da2b135550be24ec6fb7f8991391391f583ce0e606deaeb1300cdf2a2b275d2b197bb144b144d0201d6c4546c21d99459d860848af9b5b920726ea1bd337609440f7ea9df616d569d4f78f3ae335c03"}]}, 0x6, [{0xd9, &(0x7f0000000800)=@string={0xd9, 0x3, "dad2604a44edcdb0311761e1a160ddfbd4aa350907dabbbf75f8e45843c026501ad71d37e7945ed388e1e4e87ef121dcb1c62df72ce6662e51b9fa15adbe33effd2419ce34fe0d7406379fd2e307d28434e056adf1703dc9f6277a15bdceb34c023514938c0a8b546d9869be3b7ea1fcbf4922c5f1e56715ae7a188c93f52c25348effd5eebcdaa5789eb16220b883f9aa0b19dfd7feb139ddc57d677360282e3719cf34e485ccfc9af639330fd9042990244480f7929b919f1cb80f5cd4c3743d0f8eeb9906fb10dbd4ba8ce8809180e80088185f912e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44c}}, {0xdf, &(0x7f0000000980)=@string={0xdf, 0x3, "3a74dcb518deee6b874a766d77b5ad67cb8e96212178ef48de6caf907322366a300839d3c29801c5af424601c276583012e6620a07b042acef10cdd32e1e241780ecefb2d9e4689eab944d94f61b92462e88e44d4d727c14215a11e0b0655f33801915e1a302a4c35250763cdc8ec327d1bcf2018c55dc087c6784f947f674e4c72658d7887ca8f3e93b4953955c665984d1c0c749ad24e1620ea7862b7fac88fa5e82ce7289a285b96019e594161677318c37da4f7316e51353431771cdbdce6e7da5fb83560593d8f1363c6c0124525775c102b35079ec2d2c62ddd5"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x422}}, {0x35, &(0x7f0000000ac0)=@string={0x35, 0x3, "d0ddea14aedfde03fcabaa3f83c22ac7903aa5938ad580295f6d8b1e77bfea15f007b0967744640b0202558019ec686aae4004"}}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) 05:58:27 executing program 3: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0) 05:58:27 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 05:58:27 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x1, 0x0, &(0x7f0000000080)="19"}) [ 302.845537][ T6373] binder: 6372:6373 ioctl 40046205 0 returned -22 [ 303.083310][ T51] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 303.513113][ T51] usb 7-1: not running at top speed; connect to a high speed hub [ 303.593150][ T51] usb 7-1: config 9 has an invalid interface number: 64 but max is 0 [ 303.598965][ T51] usb 7-1: config 9 has no interface number 0 [ 303.604266][ T51] usb 7-1: config 9 interface 64 altsetting 6 has an invalid endpoint with address 0xAD, skipping [ 303.612264][ T51] usb 7-1: config 9 interface 64 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 303.621311][ T51] usb 7-1: config 9 interface 64 altsetting 6 endpoint 0x2 has invalid wMaxPacketSize 0 05:58:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x2}]}) 05:58:28 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000005c0)=""/224) [ 303.629190][ T51] usb 7-1: config 9 interface 64 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 303.638411][ T51] usb 7-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x2, skipping 05:58:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4de0}]}) [ 303.651026][ T51] usb 7-1: config 9 interface 64 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 303.661887][ T51] usb 7-1: config 9 interface 64 has no altsetting 0 05:58:28 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000340)) [ 303.828530][ T51] usb 7-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=3a.9c [ 303.835007][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.840259][ T51] usb 7-1: Product: ь [ 303.843360][ T51] usb 7-1: Manufacturer: ж [ 303.847294][ T51] usb 7-1: SerialNumber: 琺뗜毮䪇浶땷枭軋↖砡䣯泞邯≳樶࠰팹飂씁䊯ņ盂じ੢뀇걂ჯ폍Ḯᜤ닯鹨钫鑍᯶䚒蠮䷤牍ᑼ娡新㍟ᦀʣ쎤偒㱶軜⟃병Dz喌ࣜ杼濾⛇흘粈㯩卉岕奦톄쟀굉๢蚧缫袬建캂襲薢悹ᚔ眖谱獏匓ᝃ쵱캽絮ﮥ嚃錅㰶Ŭ判畗ˁ傳Ⱝ [ 304.184540][ T51] option 7-1:9.64: GSM modem (1-port) converter detected [ 304.197483][ T51] usb 7-1: USB disconnect, device number 8 [ 304.206212][ T51] option 7-1:9.64: device disconnected 05:58:29 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0x81) 05:58:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x301202, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r0) 05:58:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 05:58:29 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 05:58:29 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 05:58:29 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x149001, 0x0) r1 = io_uring_setup(0x7a3a, &(0x7f0000000000)={0x0, 0x679f, 0x4, 0x200002, 0x0, 0x0, r0}) io_uring_setup(0xd4b, &(0x7f0000000080)={0x0, 0x7548, 0x2, 0x0, 0x9b, 0x0, r1}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) epoll_create(0x7f) 05:58:29 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) 05:58:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') lseek(r0, 0x100000000000000, 0x0) 05:58:29 executing program 2: semtimedop(0x0, &(0x7f00000003c0)=[{}, {0x1, 0x80}, {0x1}], 0x3, 0x0) 05:58:29 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, 0x0) [ 304.664932][ T39] audit: type=1400 audit(1656395909.113:237): avc: denied { write } for pid=6396 comm="syz-executor.1" name="fib_triestat" dev="proc" ino=4026532934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 05:58:29 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0x9}], 0x1, &(0x7f0000000340)) [ 304.674370][ T6401] QAT: failed to copy from user. 05:58:29 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x8, 0xfffffffffffffffb) 05:58:29 executing program 3: r0 = memfd_create(&(0x7f0000000400)='Nwlan\x91\xfe5\x89\xf6\x06\x16\xa0\xbb\x95\xaf>%<\xeb\xda]\xfdL\xc2k\xaeh7\xec\xc7\b\xad}\xc6\xbf#\xb55\x02\x86\xf0\xbb`|w}\x98\xa0\x85\x14#N\x97\xe9p\x1d\xf8\xc3nQqu\x97\x80\xe1\x87\"\xd5\nH\xa0\x88\xc0\x1aw\x9bA\xd2]\x97\x02{\x19{o\xc5\xb1\x81\\\x9c~\xe7\xca\x13e(\xaa\xc7\x8d\xad\x1e\x17$3\x91dN\xb7 \xc5\x8e\x87\xd7\xeb!c\x8d0y\xe8b#-#\x9a\xba\xa7\x83\x11\xb1\xb0T\xc5&\x0e\x8a\xd6\x88\x95\xce\xb1\x13M~I\x00\x00\x00\x00\xa0\xd6\xcc\x95\xc4m\xff\x0e\x03\xff|fj\xad0\x83\xf8\xe3o\x11]7\'\xb7#\"\xe1G\xce\x06\xfa\xab\xba\x10\xba\xcf\xe9du\xc9ou\xf35\x8b\xd7g\xd5\xee4\xac\x03DZ\xa5\xeeh\xb8*Q\x1f\"\xaf\x00\xeb\xda\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x91Ld\x97\x93\xb3\xb0\xb0\x9e\xdes$\xf0\xc6\xf3Y:\x7f\xc1\x8c-\xfb\xdc\xfa)3\xd4G%\xbav\xe5c', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4d091, r0, 0x0) 05:58:29 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xc080, 0x0) 05:58:29 executing program 1: io_uring_setup(0x51, &(0x7f0000000000)={0x0, 0x0, 0x9}) 05:58:29 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x806c0, 0x0) 05:58:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x24}}, 0x0) 05:58:29 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 05:58:29 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa8500, 0x0) 05:58:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x0, 0x0, 0x0, 0x7}}) 05:58:29 executing program 0: socketpair(0x36, 0x0, 0x0, &(0x7f00000001c0)) 05:58:29 executing program 3: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 05:58:30 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={r0}, 0x0, 0x0) 05:58:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001a40)={'erspan0\x00', 0x0}) 05:58:30 executing program 2: select(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 05:58:30 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 05:58:30 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000001e80), 0x14000, 0x0) [ 305.585735][ T6433] binder: 6431:6433 ioctl 541b 0 returned -22 05:58:30 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 05:58:30 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f3198627"}, 0x0, 0x3, {0x0}}) 05:58:30 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x30, 0x31, 0x5d, 0x0, 0x257a, 0x260b, 0x3a9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0xbe, 0xda}}]}}]}}, 0x0) [ 305.904832][ T51] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 306.103088][ T51] usb 8-1: device descriptor read/64, error 18 [ 306.382918][ T51] usb 8-1: new high-speed USB device number 9 using dummy_hcd 05:58:30 executing program 2: openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x200000, 0x0) 05:58:30 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003900)={@cgroup, 0xffffffffffffffff, 0x2}, 0x10) 05:58:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080)={0x0, r1+10000000}, 0x0, 0x0) 05:58:30 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 05:58:30 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x4000) 05:58:30 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, 0x0, 0x0) 05:58:30 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) [ 306.603120][ T51] usb 8-1: device descriptor read/64, error 18 [ 306.735578][ T51] usb usb8-port1: attempt power cycle [ 307.163151][ T51] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 307.256786][ T51] usb 8-1: Invalid ep0 maxpacket: 0 [ 307.423060][ T51] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 307.513131][ T51] usb 8-1: Invalid ep0 maxpacket: 0 [ 307.516981][ T51] usb usb8-port1: unable to enumerate USB device 05:58:33 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 05:58:33 executing program 1: ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 05:58:33 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000002c0)) 05:58:33 executing program 0: io_uring_setup(0x593e, &(0x7f0000000000)={0x0, 0x0, 0x1}) 05:58:33 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) 05:58:33 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0x5460, 0x0) 05:58:33 executing program 3: memfd_create(&(0x7f0000000000)='-(/^^#\xb5\x00', 0x2) 05:58:33 executing program 0: io_uring_setup(0x1eb3, &(0x7f0000000080)={0x0, 0x0, 0x4}) 05:58:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4}, {r0}, {r1}], 0x3, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) 05:58:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 05:58:33 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 05:58:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}) 05:58:33 executing program 2: mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) [ 309.501299][ T39] audit: type=1400 audit(1656395913.943:238): avc: denied { create } for pid=6479 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 05:58:33 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)) 05:58:33 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000240), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000280)) 05:58:33 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) [ 309.519650][ T39] audit: type=1400 audit(1656395913.943:239): avc: denied { ioctl } for pid=6479 comm="syz-executor.3" path="socket:[43114]" dev="sockfs" ino=43114 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 05:58:34 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced}) 05:58:34 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) 05:58:34 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x8, 0xfffffffffffffffb) 05:58:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000540)=@userptr={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c0889156"}, 0x0, 0x2, {0x0}}) [ 309.548534][ T39] audit: type=1400 audit(1656395913.993:240): avc: denied { map } for pid=6483 comm="syz-executor.1" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 05:58:34 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 05:58:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 05:58:34 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x210040}, 0x18) 05:58:34 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:58:34 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 05:58:34 executing program 3: ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0), 0x8) 05:58:34 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x0, &(0x7f00000000c0), 0x8) 05:58:34 executing program 1: syz_open_dev$vcsu(&(0x7f0000001a80), 0x4, 0x0) 05:58:34 executing program 2: r0 = epoll_create(0x4) close(r0) 05:58:34 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 05:58:34 executing program 0: socketpair(0x2c, 0x3, 0x0, &(0x7f00000007c0)) 05:58:34 executing program 2: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 05:58:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8038550a, &(0x7f0000000040)) 05:58:34 executing program 3: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, 0x0, 0x0) 05:58:34 executing program 0: prctl$PR_SET_FPEXC(0x21, 0x2) 05:58:34 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f00000002c0)) 05:58:34 executing program 0: ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={[0x5]}, 0x8) 05:58:34 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f00000015c0), 0x8) 05:58:34 executing program 1: select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x1000}, &(0x7f0000000100)={0x77359400}) 05:58:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) 05:58:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xeb1a, 0x1, {0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 05:58:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) 05:58:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) [ 309.907611][ T6544] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! 05:58:34 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) socket$inet6(0xa, 0x0, 0x0) 05:58:34 executing program 2: syz_usb_connect$uac1(0x0, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0xa1, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}]}) 05:58:34 executing program 0: prctl$PR_SET_FPEXC(0x22, 0x2) 05:58:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) [ 309.965480][ T39] audit: type=1400 audit(1656395914.413:241): avc: denied { search } for pid=3355 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 05:58:34 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000240)=@string={0x2}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}]}) 05:58:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x802c550a, 0x0) 05:58:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x802c550a, 0x0) [ 310.211023][ T39] audit: type=1400 audit(1656395914.653:242): avc: denied { map } for pid=6549 comm="syz-executor.3" path="socket:[41386]" dev="sockfs" ino=41386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 310.233019][ T47] usb 7-1: new high-speed USB device number 9 using dummy_hcd 05:58:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x802c550a, 0x0) [ 310.312997][ T51] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 310.504730][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 310.562978][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 310.633220][ T47] usb 7-1: config 1 has an invalid descriptor of length 161, skipping remainder of the config [ 310.641264][ T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.683040][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 310.684319][ T47] usb 7-1: language id specifier not provided by device, defaulting to English [ 310.743121][ T51] usb 5-1: language id specifier not provided by device, defaulting to English [ 310.846059][ T47] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.852391][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.861250][ T47] usb 7-1: Product: syz [ 310.867017][ T47] usb 7-1: SerialNumber: syz [ 310.873438][ T51] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 310.882131][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.889008][ T51] usb 5-1: Product: syz [ 310.891873][ T51] usb 5-1: SerialNumber: syz 05:58:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x802c550a, 0x0) [ 310.937410][ T51] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 311.136434][ T3755] usb 5-1: USB disconnect, device number 11 [ 311.213498][ T47] usb 7-1: 0:2 : does not exist [ 311.241547][ T47] usb 7-1: USB disconnect, device number 9 [ 311.285944][ T4836] udevd[4836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:58:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_RESETEP(r0, 0x80045505, &(0x7f0000000040)) 05:58:36 executing program 1: syz_usb_connect$uac1(0x0, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x6, 0x2, [0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf9, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfe, {0x7, 0x25, 0x1, 0x0, 0x5}}}}}}}]}}, 0x0) 05:58:36 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) socket$inet6(0xa, 0x0, 0x0) 05:58:36 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 311.714404][ T6578] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 05:58:36 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x0, 0x0, 0x7}, 0x48) [ 311.741286][ T39] audit: type=1400 audit(1656395916.183:243): avc: denied { map_create } for pid=6580 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 05:58:36 executing program 2: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 05:58:36 executing program 2: prctl$PR_SET_FPEXC(0x3e, 0x2) 05:58:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x40085511, &(0x7f0000000040)) [ 311.923167][ T3758] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 311.943070][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd 05:58:36 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000680)=@string={0x2}}, {0x0, 0x0}]}) 05:58:36 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) socket$inet6(0xa, 0x0, 0x0) [ 312.195971][ T3758] usb 6-1: Using ep0 maxpacket: 8 [ 312.199270][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 312.313258][ T34] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 312.319073][ T34] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 312.326595][ T3758] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.333969][ T3758] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.340044][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.443060][ T3787] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 312.533302][ T3758] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.541180][ T3758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.547377][ T3758] usb 6-1: Product: syz [ 312.551184][ T3758] usb 6-1: Manufacturer: syz [ 312.554959][ T3758] usb 6-1: SerialNumber: syz [ 312.614095][ T34] usb 5-1: string descriptor 0 read error: -22 [ 312.618145][ T34] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.627166][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.823181][ T3787] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 312.873322][ T3787] usb 7-1: language id specifier not provided by device, defaulting to English [ 312.895452][ T3758] usb 6-1: 0:2 : does not exist [ 312.903095][ T34] usb 5-1: 0:2 : does not exist [ 312.918730][ T3758] usb 6-1: USB disconnect, device number 7 [ 312.925883][ T34] usb 5-1: USB disconnect, device number 12 [ 313.233065][ T3787] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.239214][ T3787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.244332][ T3787] usb 7-1: Product: syz [ 313.247139][ T3787] usb 7-1: SerialNumber: syz [ 313.283773][ T3787] cdc_ether: probe of 7-1:1.0 failed with error -22 05:58:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045505, &(0x7f0000000040)) 05:58:37 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000c, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) socket$inet6(0xa, 0x0, 0x0) 05:58:37 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x4682) 05:58:37 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc0cc1}, 0x18) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) [ 313.421724][ T39] audit: type=1400 audit(1656395917.863:244): avc: denied { append } for pid=6603 comm="syz-executor.0" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 313.441875][ T39] audit: type=1400 audit(1656395917.883:245): avc: denied { mounton } for pid=6605 comm="syz-executor.1" path="/syzkaller-testdir614191756/syzkaller.n6e8GZ/329/file0" dev="sda1" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 05:58:37 executing program 0: prctl$PR_SET_FPEXC(0x29, 0x2) 05:58:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) open(&(0x7f0000000600)='./file0\x00', 0x410802, 0x0) [ 313.487995][ T3284] usb 7-1: USB disconnect, device number 10 [ 313.551810][ T39] audit: type=1400 audit(1656395917.993:246): avc: denied { unmount } for pid=3717 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 05:58:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x160a82) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FROZEN\x00', 0x7) 05:58:38 executing program 2: socket(0x2c, 0x3, 0x7fffffff) 05:58:38 executing program 3: clock_nanosleep(0x0, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 05:58:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8108551b, &(0x7f0000000040)) 05:58:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000100)=0x7, 0x4) 05:58:38 executing program 2: syz_open_dev$usbmon(&(0x7f00000000c0), 0xffffffffffffffff, 0x204002) 05:58:38 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5768}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7f, 0x0, 0x81}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xfe}}}}}]}}]}}, 0x0) 05:58:38 executing program 3: clock_gettime(0x1, &(0x7f00000001c0)) 05:58:38 executing program 2: syz_usb_connect$uac1(0x0, 0xc1, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x1, 0x20, 0xdb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x4, 0x6, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x2], 0x4}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x8, 0x3, 0x1, 0x5, 0x6], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x2, 0x3, 0x2, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xf9, 0x1, 0xa1, {0x7, 0x25, 0x1, 0x81, 0x4, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x1, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x3, 0x96, 0xcc, "413ab3e33519bc77"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7f, 0x1, '?', '*'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x5, 0xfe, {0x7, 0x25, 0x1, 0x1, 0x5, 0x81}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x40, 0x5, 0xf5, 0xff, 0xbf}, 0x8a, &(0x7f0000000140)={0x5, 0xf, 0x8a, 0x1, [@generic={0x85, 0x10, 0x0, "11b180a6ba3b4e17fad27f36baa581b443a66b051a81333eb54a4c5c95d8ac09bef9ea364d5bda0af849742b068bc19fe1a856c327a4926ecee213b44ecfd2eaeb566849a52ff1f2ad430a8b70019360b3140fea90eaf9e5997329fdf351e6e45c4fb2f3c6e56b0e1647e3fcb92215b946a9a24b5cabf1faf34576a8858245cbcb8c"}]}, 0x8, [{0xbf, &(0x7f0000000200)=@string={0xbf, 0x3, "101b06297160eaae56da89bf0959fb3e17937f7f18daea416559a65a3d2ce151bc12a1e5e7038459087fa684f1bad1650f1c5aea13aa80ce56bd58794ce28f9e319720086ad1d2dc2bb0b237021647ef5be7a62d0c35f120fef8078a53e6e904bd16d53e8367d65ecd1ec7d7c4539e9060a1a4aa5f00cd236547c76b4c59d3ad5a52cd20edd498369c86426cc489f574859b090cf988787c55d45c10a66ec42763772d1e1c65c84be2f6fa348bf477b11b6066b1dccabfc674dabff343"}}, {0xfa, &(0x7f00000002c0)=@string={0xfa, 0x3, "7a79248c6c70a1faa57f8c22f3447efb6c4ce623fde6bd1a01ec471cbd6aee28dd7f5f64da4ecbe8ec4dddae0ac475618d236455df1cb056d9c22c087c0df50e107afd6948c3f2079c450b5be9a558e77ad71c859f755968953eccc161ac01a30618f0b8f0826107c2eef9568c0c880b49a993015c19918dea8c5490791ebb6595044c402cfff59efc04f79ae433bba995958fb18bb2cd2b97abb428d04cefa72d98044e6fa5033412c302685cfa3ee29603a6e0283cdecc89ddfc1f227ae64c5665e39491826206ff8495e7b492b1bf830c649fe9201742252337578c04220165007c767b3d92c289783c15971b116995292c4c62a1b3bc"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x425}}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "31d2cbdae8e6dcf1c2d51b93aaef34edcc537d2121a15fbadb39ed16fd3127f168d8408d291f1b6d7a5a72b53a8573580b6d9947b51f3aa9b8b9030de98d94ae25f4c0c5061a0066bf764bf009c25f49cf5434195a514274fc4d97e96373ebd8afe5538968532629c5a6fb1f2aa0fa69d79c4dd114fa88d36465a3546c0803cca9bba2c333d94637458b6d64320d1b86920cf88bede0e92dad83f54ec1d206f67a5fe28c56eba105af66e7e06e264672ef90d4feaa8e50f0e4b9190cdfc87e072b3930bb84507b98cd85"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f0000000580)=@string={0x50, 0x3, "29d1c8eddd377c14d0c97928397e46e8ebc82f72366e977a36994ddc5e25195431e7a7189102aa2fc07a931a5c72081be1762bc36643553712a1543235c5702f6d61cbdd098602f003638e65e9af"}}, {0xdd, &(0x7f0000000600)=@string={0xdd, 0x3, "2bb06ae52d15e939c68a32a2bee9e359a2d92057508f42e9ab2e2069d564749b695e6deb699b85fa5df91f3ce3fa6a82e7ecb540f52ebfd9de646740cc9256af5a0ed696a26d8a549a43e6309523fda9005e44256736bd61d837de28da05e28f6d58abc66bf99cf5054eb453807b74ad0b84cf55fe002732eb441653dcdcc998ef8c95efb94a2295b862665b678ae68717fe6371f1dbc09887a77cf0422556895b7f6345cbbda610a50b11ec41962c4583ab3c6358863cbf77e64c58418ebf67579f68e9494068752e510aca368f196133c1a5139aae485d4f45bb"}}]}) 05:58:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$tipc(&(0x7f0000001040), r0) 05:58:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000014c0)={0x0, 0x0, "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"}) 05:58:38 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x207, 0xc02c) 05:58:38 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x80) 05:58:38 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0xa6282) [ 314.322924][ T3761] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 314.343354][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 314.582975][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 314.693095][ T3761] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 314.702734][ T3761] usb 5-1: config 1 interface 0 has no altsetting 0 [ 314.793380][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.801127][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.863137][ T3761] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.868766][ T3761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.877207][ T3761] usb 5-1: Product: syz [ 314.879784][ T3761] usb 5-1: Manufacturer: syz [ 314.882494][ T3761] usb 5-1: SerialNumber: syz [ 314.903268][ T6628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.923828][ T3761] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 314.963317][ T34] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.971601][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.979086][ T34] usb 7-1: Product: Х [ 314.982448][ T34] usb 7-1: Manufacturer: 祺谤灬瑱羥⊌䓳ﭾ䱬⏦᪽᱇檽⣮翝摟仚䷬껝쐊慵⎍啤᳟嚰싙ࠬർ໵稐槽썈߲䖜嬋ꗩ흺蔜疟桙㺕쇌걡ꌁ᠆룰苰ݡ囹ಌஈꥉƓᥜ趑質達ṹ斻ҕ䁌Ｌ黵Ӽ髷㏤ꦻ閕놏늋⯍ꮗ⢴䳐꟯頭丄ꕯ㐃쌒栂臭Ζ㰨쳞ῼ稢䳦敖铣芑٢蓿銴뾱ಃ齤⃩䈗⌥圷ҌĢe發㵻슒碉ᔼᮗ椑⦕䰬ꅢ벳 [ 315.007853][ T34] usb 7-1: SerialNumber: 툱헂錛双ⅽꄡ멟㧛᛭ㇽ赀Ἡ洛婺땲蔺塳洋䞙᾵ꤺ릸ഃ跩꺔엀ᨆ昀皿숉䥟哏ᤴ党瑂䷼獣襓卨⤦ꛅΏꀪ槺鳗텍﨔펈敤咣࡬찃뮩쎢㝆譅摭ല蘛ಒ诸ⷩ莭仵틁彺賢֡暯♮牆郯ﻔ躪매ఙ죟ݾ㤫묰傄须藍 [ 315.127885][ T3758] usb 5-1: USB disconnect, device number 13 [ 315.433061][ T34] usb 7-1: 0:2 : does not exist [ 315.447492][ T34] usb 7-1: USB disconnect, device number 11 [ 315.472413][ T4836] udevd[4836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:58:40 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)=ANY=[], 0x18, 0xfffffffffffffffe) 05:58:40 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000240)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}]}) 05:58:40 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 05:58:40 executing program 3: socketpair(0xccce77e7522ceb2f, 0x0, 0x0, &(0x7f0000000180)) 05:58:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4004551e, &(0x7f0000000040)) 05:58:40 executing program 3: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[{&(0x7f00000002c0)="9c3198b6f4259d10d8b6ccf7068f2b7bf2acb48da9c290c60644338f93e4131205242dfd986fc3ddbc66f5102ea3005a1501706d748d7c524d6362082d28cc4a82210433e0b27e795d43dbf4ede23d21d0cb8fbdbbbf6dc4949e208a9a3718be0d57257ba6ea625e9b881b0a53b997ce78c7cc21afdf6cdfabfc258890f5a33ccc4ea1de59b7bb4f9c7dfad9a3d684ec00db1e97dd8559b1ee432e5ea7ba168daaf6a7438ddb0c18bbc15598e568161c57c051945753d6a82dda5ccd876b05b3fe696ed98a9bee9c7e73ba41a1e791d1bf676c7b0c58a79a2460d9fd4d9065623710d4559cf07350916624629d77eb072426500ef40016a9d76d883064a47946e87121ae44f7613741f4ee1834b65c82af36cf625a4f21a818928ead8d479bd2f95cd23b12df73adddc44d7ccbb92593ff2c08b2deac9d5a13641042cb96a097128192d4e129173dabc758aad00499eaf860498c9215d248c2c273a650653ec0c4a40d1720d902e9618d76c7c4ed20eaea3fa91feefe01a5f0ebaa2dc3e13d0a32ef39ce15c918e116c0029fe224188e044ab29866da6ba8eecd8f8237c0fc3c3413c761f2b098aee24be3fa4e5ab2a0a8a7bc9940621345683373fa3fa088d9c5d448ccbf4fe59cbb810a7c3841997a19f27d7cf0836d97010b82971f796c32da391b90f8bd74bf35dbcb91e50f9f9f59f0a0488fb7181ab6db9700e01f974445e6e2215d42513b0ee16ad15f6bf7de8a329299de052d348e287eb83b2407fadc0e8165e3206c2ce74d7bb006ad7c483b665101c283c4686a611be66b45d0257d09cc2273761cee7dfb713341cb03e5efdb83a622f5f373ba489793ab9682351c91163db12f25aaff8fb97a357be1306d7831b7dab09f082e951d0aacd7ff250e173c428eb1dbbd0be6fbd9d0c43c520ba35dad5c911c654478c930c8af6f9ab0097d934be553c9ebc9c17d6574e2cc07c3d0822060752d4d02d67d316719c0f7ce236383a3c0afce843ec6b4d76f00a192f6f7ac2b2f9199e1099a72dc7e66c8bbd1d633acd30a14fbe4256da3666c0df8d0f815526e62026439724bfb9d499501342d239bd0d4db0c747d68f73cef04977a3a7434ea7f166aaff13d641ff548f90b1c35cda2aba8496920a0cdf5c66249898dbe8bbb908dc04bc9416b0fb35910bbeef135d356ce8ec4b95d564cf44ccd17c122891ff45c062bd5d8ba11ec57118ac89e842d3567a960cb4a0719316cecf4718cd3d83e3d8d3c47c2d04dda8c40b343974d5d7dcd7b11e8c3d16bfe5117c91aef2c0cef211c29c770715b4ed39e783ed773cfc72d9d239935629a68faf99510a81d2d168b5e6f12e2a335a67015dbf05b2249d6bbc4ca9a6b515103ffa1ed11618548b19a79b102a8f1e1a1efda600bc0c40d45529b81ecbf8a6a82b07b5437b09f54c1d7a37e1be56ae09b80d55ac3a8ad0151aee65e88cdfd9c45f1529a749036e139084f07b31ef0d001c34d63398a5ad1a60020e7e733d7de38e7c575fb9fa365a3b62ae188990cffcfff7dd9824b324bf06c585130d8e00a69a4fa584aa60a4f8a32668fa5d9f59b92da2fee750374c42dd5c6d88a41cf999c1eeaab69cdcbb9bc5de5619cf05102f640ed51d791f9ffbf8bb83e43f43e198941de4176c75cb5c8dfe9627d2e93f7e8081e3a3c900b1a8aea924f6a9273574b2a57449a33cae6890fc431ce30b797b6f911374640cdc82ca544d8a48dc4d4a31ea1cdb5a1fb2b786bd8ce77716a76601b3ce47cc33d435398965382c6e443ec444c88bd9ddc2952be1bcb499c2f241a8b2e0e9f1c04683f8b9920e490c736e85e51577a231edb4e53846490efe6be941314b51e1751e6b0bd4616bb8b8df07294ba440f65b9ec6a870abb59c4b13da6f3b89ca9a873ae799f9a4f4e2c00790dc8d075eed5ba944e55a6cb9d2c752aa06ad8287ce676de2b96a6e3f79c15e49f29556a63aaeef3db9884b815ef61c4e2952906e0376f776105c7050269e517643fca7b10634c8a8c80d6827fae04f2729afccc33ac9bb28357a3a2bfd47a8844b51fdf5cc5b0ff779116682825a45faf5cb41fe31f61004e32708f7bd64ae904a3ed82c419180b05bae28c9a75db9f60e3d2e56403fe79f9f47dc19149dd69c877e457d3a8d02d656fc15ec3f42133178abc8b60306da457efe1b500ab37971f14203eb6bd491bf39efaab0387c66da7fd3a42b39c6df496121e1ecfe241eabd36002617a4600381296f49bfad6c2ee04cf5c605d472ff3e0509f77ae32f33ed2247f04c48fc34861d1eb635b80c9bfae222931e9cd60b4334b32e989bc9bb1bf2054db8b3c7afe77b9d5a01e86d17a8ec8c8ff4bd7b94f3fb7f6cebeccd9aaba70b25a6849c122e8ce64f9f0f69b517e1184dc742ae3df6e5d2075b60b96e966df247733dfb25e4e9e6497bb56f0c6374a494e2d08addd43d69a1a9f7be407e99071decafd81d5d33940c80cdd9402af2f5c513bd19d897bef82681d98e64e03f2548acc0b9c658e356faef2541c571e6b120e7dec35b18f7bf2bf0374b6d5d6ecf57bf2b16f6b31b21b0e6b843ee91304b677e848676c138769f39c85c6a8c49caf0e3afc8e6606fe195903959a105fa1a7cea54e7b39b177df10fa3f159732dd5b263e2fec4be5ad15393a90849bf1b30e70c51b13cbf1f3e0247fdeff4fa4b3a9db73c77255fc798441e7f595dcf30a724640a99776d2e9159e58ed9dfab62319cf4aeaae61cfeb6d8319c29748d6443b4cd193215b2c8dc357ca088767ee757072282d7fd929cb16f34d18a59d86f956e2dea1c27bc8bcddee591990f36b8de073fd0c4657659f67f900bbba1d6a79fe8545c263a232439967665e43d80f56e05296047a6596e4078d585cb01fedd0c58f447733c1efc8616cf6aae867b90c50ee698dd3aec2e60e7509597fac9128eb377202b652924ab9c8730a247917fb30f8197908c30a4c411141567bc4d5e2f2ef3e228c1dadd3073df6da32119ea51ed25ba814c235c7540e531d708e430b835e2d18655b4a010d1ffca41285ee05ae7a5566ca5dabacb418a0e6a97f2348eed3a24300e377de668265f6a1693d056bfc9c50d1aa1dc77500652bdb92ba028377067aee9eb26f531bc60d01796d55490fdca4eb933d07f12ee893b8259a17a75a3f98d1a3146cb490afd8ca64bdebc4d22f49a03a25ae5cec652a941fcc347d3c4ba65b761f6c6e16c5ea56748e1cc466df06f54c70a74d9a5df1bfb1f99423548d89e3d8b2b759cd88ef3626ef1247f96f06d5826044502cb3e7711fa1f25a8df7175b27856cf0ade0fd51594d12f7b624f3d8899be302b6a6171cc3a8645c6cc9a6f284a29ca45eba27a48fb72a6dcefaca980a431d8209920331408ca0b38cbe8169a44e3886677319e3577b3877760f9c83a70d551f68942b9d259a947d86b2bcc2edd5159050ae678f7e0bd24719c020a917d191376a27f017010ad4d4113b078a8321ece87f4f7ab30e601528c196f2c6c43bc7989dbc4aa9033c7bd61e2ae070dd871d2c70fde7e36ce933f32b11b1eede2ca8beac9635b5cd6f3022158bb6c073233b4cb5da03254a42d5f3c816ea082b518cef77e96d233cc8c969a5fa006211da33ff07a2e559ae377a065b71fd531da3d9aaa6d63e8ccd103605169b3182ae3f4e32b93654dadc9d9266479a3d7ec0c6ed65f159ab0acbc34ba84d7898a60add254a7914e9ff1c1a88b6e271441c8968ba19fcbb6a3792508cb9b2462e9c77d2b47a78b47a6afa5cdd9f2d1a92202c8a4cad9fc0e2c68470567fe978b5ef15e1b72d8272b8a4a510cb8c86ffcb7fdd2a2636e1a72a3c55510ec1853c4c4e56fae8cf3e445a11a5a629b72fb95fd9c05a85eb4b9cb008f609e36345da0c4e00c548e78541cec08708dae62b74f54e2c8a4b35dd57a75706a5c807956e229566bc833b149347aef2c2db2cbe665d60de4a984ba1d1b595df5cc64d0a32f578ca8ab498b574ead6908211d9365ad5939f19cb52e7ab5b1ae3c5eec445e453a0777a687a5a7fa0a34ab8e51824603b7ba85c9c3a97e3ca6497011aceb1fdf5b38e2d24f42bdba02f98d897a277546de516a22acfa86ac4abe8a04ddd346c652ccf40c277a2dbf19126a4987618b91ba10ccc22d13e50258a1ceca76b963475c9a5998aea9e9d124c0397781c94ed514f7af8f46dc3998f8c4d096d38563df2402269ce84e1094ba9f38fbecdbc4fd45691647ce25131859a9e5669b675a112f427f8d0fd6e557017743e816972e25da34b65e4a18bb0dee45b1b7661a8e837d313321a9bd434d71562d8fce1d7b6174a66f7f3fd5304ba48b9d796ec67c5f0e082bb33078b2c84c405f48597e3fcf9c9b492134244f01dfe131c68200426cbb32abc464c40df8ec80427b909e5f7c321cd2029050090256e128adafa93eb20be9ee3994214ab0914a77d04d2d5ac0621150b1cacdd890edce862324dac77c67fbf5aa132629db472e362b6995f31cf72c0a8fb695de168beb15cb9bf114a3bc9d04afeec07833b0227af52fef5c3a3368082ff8c4439a7ee1f4f3fc5853d936c2ca0436d72bd88aba6c5c05fa99a4a8bb8ec83cb305b40ddfa70396103daec4c2945eef596cbac7fe77be586c107c14f8e749670be512c0487daae7ad238c17395029367144455740526a80d616468150d4978fc42fe613c66719a822e23f47e355fb72241bd265ffed38eb6a5c7afb14b18a67e944b258addf957db61e04b0a9efd79a88403c0a4f6edf29394f964e83d65e22393f836856dcc2f4e78188d39de405b4da8583f1820fda79950f14bff09272f4b23ca30e8717dca1f05db24c0abc9a3c211c86faf6efa3b7898720b65998aad98ddcda8a848c236fc8da2d236fd391345e8fe84a3679664de1f4cb5e4166c7596dfd1e7c203327e04fcfb773163b5871b67e46930c6b6e1b729e312aa0e476ffbc84769714be4a304bc1eb719cc7b6436a731ec677292e6522a2f8be9085c171d55cc55c96c9ed77bcb36d176d9096f350dd0ad2fac0fe7436823783c6c99605700a3c0a28d725efe4b63b49a7edbce5a058ea854cc253f56c1f28a85d2a2321853c747b4a65889f467c8cbc7ba2c0614d41452a9b95f52dabdcf93867073af055962f81bb07d5fab8bdcdc882a5801b6587b0d996e6abe07049f52f421d23dbe5262a0f8efc7da1f6f51e1ceba3c3eba67a88e46dcf705ae0c0f94e952cf0bf8c23fb672bbc72a3f9f54353611efc6fe685c85bcc001dc2ce450d49f67264e23d60e5ca72e429108b9300b54c7bfbe8a31e8f69f4f181553a0f31c9c4c805254a466b1519308f49e2ee062d1f4bf79d2898cca4cd4028e02368b8187b2b7e4b2280ff0adb42c41f79c65e95c3407482e9080ce8d78bf9ddd4f7e6d61f9c895a37ea5bebc7edbc57c70fb9fa4ecb006e314994f77784dc2088895ef6d7702970eb5465ca2d505963331ae4ea3dbc1a7d8d400473f209bef4b0c39184a3c509cb475f028ea8457da35037f33389903eac349bee6fd32588ac10fe3e1d9c1935444b4c9b7640b08ecdc2af90d8843e8f48f6b78b29fcc7e8e8fd70f032cd760bad2f59d335c3034c2779e470a33e6dc679ffc82e4bd60be6abf39044c72abf4036ae69ee1f378ff504435718ab2efc263f67c05267d94d5ebe209f53f048bf6fad25472c1681d09272b3ed5c3c855e042742d0416104bde718d003a460c6ca25857a03235131f1aff1bb518c27eb0c5fdcda0bca36834290a5144524a0fc8a99e28008852d", 0xfffffffffffffdef, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x30], 0x2d, [0x0, 0x6b], 0x2d, [0x0, 0x37], 0x2d, [], 0x2d, [0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}}}, {@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [], 0x2d, [], 0x2d, [0x0, 0x0, 0x39]}}}]}) 05:58:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4004550c, 0x0) 05:58:40 executing program 1: prctl$PR_SET_FPEXC(0x8, 0x2) 05:58:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000200)='O'}) [ 315.912983][ T51] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 316.005166][ T6656] loop3: detected capacity change from 0 to 32766 [ 316.162918][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 316.303138][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 316.343153][ T51] usb 5-1: language id specifier not provided by device, defaulting to English [ 316.473423][ T51] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 316.481724][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.488705][ T51] usb 5-1: Product: syz [ 316.492580][ T51] usb 5-1: SerialNumber: syz [ 316.548194][ T51] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 316.750772][ T3757] usb 5-1: USB disconnect, device number 14 05:58:41 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x8000d00b) 05:58:41 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000001c0)={0x1000, "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"}) 05:58:41 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x3, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x6, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "3060de8d"}, {0x5, 0x24, 0x0, 0x5768}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7f, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc1, 0x17, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x20, 0xfe, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x90, 0x5, 0x3, 0xff, 0x2d}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0xfffffffffffffffd}, {0x66, &(0x7f0000000680)=@string={0x66, 0x3, "a3398d739f8c960d560917508c1c232cb5a58fb6758a43a717504f7e1d36736c794a5aaf8dae95951acfdcddfdcce764f8c1ae8ea3fb94e3f83aa826057412828d2c6d019f36bd3861b96ceef8ea883546ff96df6628478273dc71e36da23d921ae0b1a6"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}]}) 05:58:41 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 05:58:41 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x8000d00b) 05:58:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', 0x0}) 05:58:41 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x8000d00b) 05:58:41 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 05:58:41 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x8000d00b) 05:58:41 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000680)=@string={0x4, 0x3, "a339"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}]}) [ 317.533355][ T3757] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 317.553104][ T51] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 317.713015][ T3758] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 317.782974][ T3761] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 317.855889][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.860750][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.913279][ T51] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 317.923302][ T3757] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 317.933079][ T3757] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 317.941085][ T3757] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 317.952776][ T3757] usb 7-1: config 1 interface 0 has no altsetting 0 [ 317.963030][ T3758] usb 5-1: Using ep0 maxpacket: 32 [ 318.097004][ T3758] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 318.113499][ T51] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.122601][ T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.129358][ T51] usb 8-1: Product: syz [ 318.133222][ T51] usb 8-1: Manufacturer: syz [ 318.137241][ T51] usb 8-1: SerialNumber: syz [ 318.163393][ T6668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 318.163441][ T3761] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 318.168475][ T6668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 318.183953][ T51] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 318.233208][ T3757] usb 7-1: string descriptor 0 read error: -22 [ 318.237616][ T3757] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.245575][ T3757] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.273373][ T6662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 318.279806][ T6662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 318.343218][ T3761] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.350088][ T3761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.356884][ T3761] usb 6-1: Product: syz [ 318.359668][ T3761] usb 6-1: Manufacturer: ᐊ [ 318.362653][ T3761] usb 6-1: SerialNumber: syz [ 318.367652][ T3758] usb 5-1: string descriptor 0 read error: -22 [ 318.371908][ T3758] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 318.378352][ T3758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.387084][ T173] usb 8-1: USB disconnect, device number 12 [ 318.436518][ T3758] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 318.523566][ T3757] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 318.530795][ T3757] usb 7-1: USB disconnect, device number 12 [ 318.635865][ T3758] usb 5-1: USB disconnect, device number 15 [ 318.666165][ T3761] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 318.678791][ T3761] usb 6-1: USB disconnect, device number 8 05:58:43 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa}, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf5, "c3afe46f3b7b11183b5452b4265570fc"}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x5e, 0xf000, 0x0, [0x0]}]}, 0x4, [{0x54, &(0x7f0000000240)=@string={0x54, 0x3, "70da781ff4937495600391256fee75b5f7232d9f96c0ab8e09f2774707b662bb045ed3de6d0e183e7c2a79fdfac6b30de4be5faf64840738dfac4f7ee71b81864da84519fede43c6c21c217e8c9746c84ca9"}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}]}) 05:58:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 05:58:43 executing program 3: syz_mount_image$nfs(0x0, 0x0, 0x0, 0xff0f, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0xffe, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [0x7], 0x2d, [], 0x2d, [0x53, 0x38, 0x34], 0x2d, [0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x30]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x33], 0x2d, [], 0x2d, [], 0x2d, [], 0x2d, [0x0, 0x0, 0x1, 0x0, 0x0, 0x36]}}}]}) 05:58:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4008550c, 0x0) 05:58:43 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000680)=@string={0x4, 0x3, "a339"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}]}) [ 319.293304][ T3786] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 319.433046][ T3757] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 319.467823][ T6689] loop3: detected capacity change from 0 to 264192 05:58:43 executing program 3: prctl$PR_SET_FPEXC(0x2a, 0x7) 05:58:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x207, 0x4934a) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) [ 319.533796][ T6697] hub 9-0:1.0: USB hub found [ 319.537689][ T6697] hub 9-0:1.0: 1 port detected [ 319.552963][ T3786] usb 7-1: Using ep0 maxpacket: 32 05:58:44 executing program 3: r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) [ 319.693238][ T3786] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 319.793192][ T3757] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 319.994699][ T3757] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.001477][ T3757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.008505][ T3757] usb 5-1: Product: syz [ 320.011371][ T3757] usb 5-1: Manufacturer: ᐊ [ 320.014591][ T3757] usb 5-1: SerialNumber: syz [ 320.113180][ T3786] usb 7-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 320.121380][ T3786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.128628][ T3786] usb 7-1: SerialNumber: Ќ [ 320.197628][ T3786] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 320.293849][ T3757] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 320.300115][ T3757] usb 5-1: USB disconnect, device number 16 [ 320.395944][ T173] usb 7-1: USB disconnect, device number 13 05:58:45 executing program 2: prctl$PR_SET_FPEXC(0x39, 0x2) 05:58:45 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x0) 05:58:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x5523, 0x0) 05:58:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 05:58:45 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) [ 320.914734][ T39] audit: type=1400 audit(1656395925.363:247): avc: denied { map } for pid=6702 comm="syz-executor.0" path="socket:[42278]" dev="sockfs" ino=42278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 05:58:45 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105502, 0x0) 05:58:45 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 05:58:45 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@cb_func, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0xd6, &(0x7f00000000c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:58:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045519, 0x0) 05:58:45 executing program 0: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='async\x00', 0x0, 0x0) 05:58:45 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x7f]}, 0x8}) 05:58:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x605, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 05:58:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x9}]}) 05:58:45 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x842a2) [ 321.100103][ T39] audit: type=1326 audit(1656395925.543:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23b7289109 code=0x0 [ 321.243162][ T3787] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 321.634947][ T3787] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 321.883342][ T3787] usb 8-1: string descriptor 0 read error: -22 [ 321.887768][ T3787] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.894213][ T3787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.936387][ T3787] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 322.135322][ T173] usb 8-1: USB disconnect, device number 13 05:58:47 executing program 2: prctl$PR_SET_FPEXC(0x3a, 0x7) 05:58:47 executing program 0: syz_usb_connect$uac1(0x0, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0xa1, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 05:58:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:58:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)) 05:58:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045505, 0x0) 05:58:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote, 0x1, 0x1, [@dev]}, 0x14) 05:58:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0185502, &(0x7f0000000040)) [ 322.718543][ T6733] usb usb2: usbfs: process 6733 (syz-executor.1) did not claim interface 0 before use 05:58:47 executing program 1: socketpair(0x0, 0x35c3fe577762f228, 0x0, 0x0) 05:58:47 executing program 2: prctl$PR_SET_FPEXC(0x34, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x817, 0x160a82) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0xec, 0x20}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xff, 0x7}, 0x30, &(0x7f0000000140)={0x5, 0xf, 0x30, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "c3afe46f3b7b11183b5452b4265570fc"}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x5e, 0xf000, 0x401, [0x0]}]}, 0x7, [{0x33, &(0x7f0000000240)=@string={0x33, 0x3, "70da781ff4937495600391256fee75b5f7232d9f96c0ab8e09f2774707b662bb045ed3de6d0e183e7c2a79fdfac6b30de4"}}, {0x2, &(0x7f0000000340)=@string={0x2}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x502b}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0xd, &(0x7f0000000680)=@string={0xd, 0x3, "1fd52bc498042d6a1d3578"}}]}) [ 322.933257][ T3758] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 323.064953][ T3786] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 323.183038][ T3758] usb 5-1: Using ep0 maxpacket: 8 [ 323.323065][ T3758] usb 5-1: config 1 has an invalid descriptor of length 161, skipping remainder of the config [ 323.330904][ T3758] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.413257][ T3786] usb 7-1: not running at top speed; connect to a high speed hub [ 323.503165][ T3786] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.514842][ T3786] usb 7-1: config 1 interface 0 has no altsetting 0 [ 323.573183][ T3758] usb 5-1: string descriptor 0 read error: -22 [ 323.578009][ T3758] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.586002][ T3758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.635731][ T3758] usb 5-1: 0:2 : does not exist [ 323.704169][ T3786] usb 7-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 323.712608][ T3786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.719549][ T3786] usb 7-1: Product: 倫 [ 323.838315][ T3758] usb 5-1: USB disconnect, device number 17 [ 324.053415][ T3786] usbhid 7-1:1.0: can't add hid device: -22 [ 324.058203][ T3786] usbhid: probe of 7-1:1.0 failed with error -22 [ 324.068092][ T3786] usb 7-1: USB disconnect, device number 14 05:58:48 executing program 0: syz_usb_connect$uac1(0x0, 0xd2, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x1, 0x0, 0xdb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x4, 0x6, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x2], 0x4}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x8, 0x3, 0x1, 0x5, 0x6], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x2, 0x3, 0x2, 0x3, 0x6}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0x8, 0x1, 0x5, 0x2, 0x6], 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xf9, 0x1, 0xa1, {0x7, 0x25, 0x1, 0x81, 0x4, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x1, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x3, 0x96, 0xcc, "413ab3e33519bc77"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7f, 0x1, '?', '*'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x5, 0xfe, {0x7, 0x25, 0x1, 0x1, 0x5, 0x81}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x40, 0x5, 0xf5, 0xff, 0xbf}, 0x8a, &(0x7f0000000140)={0x5, 0xf, 0x8a, 0x1, [@generic={0x85, 0x10, 0x0, "11b180a6ba3b4e17fad27f36baa581b443a66b051a81333eb54a4c5c95d8ac09bef9ea364d5bda0af849742b068bc19fe1a856c327a4926ecee213b44ecfd2eaeb566849a52ff1f2ad430a8b70019360b3140fea90eaf9e5997329fdf351e6e45c4fb2f3c6e56b0e1647e3fcb92215b946a9a24b5cabf1faf34576a8858245cbcb8c"}]}, 0x8, [{0xbf, &(0x7f0000000200)=@string={0xbf, 0x3, "101b06297160eaae56da89bf0959fb3e17937f7f18daea416559a65a3d2ce151bc12a1e5e7038459087fa684f1bad1650f1c5aea13aa80ce56bd58794ce28f9e319720086ad1d2dc2bb0b237021647ef5be7a62d0c35f120fef8078a53e6e904bd16d53e8367d65ecd1ec7d7c4539e9060a1a4aa5f00cd236547c76b4c59d3ad5a52cd20edd498369c86426cc489f574859b090cf988787c55d45c10a66ec42763772d1e1c65c84be2f6fa348bf477b11b6066b1dccabfc674dabff343"}}, {0xfa, &(0x7f00000002c0)=@string={0xfa, 0x3, "7a79248c6c70a1faa57f8c22f3447efb6c4ce623fde6bd1a01ec471cbd6aee28dd7f5f64da4ecbe8ec4dddae0ac475618d236455df1cb056d9c22c087c0df50e107afd6948c3f2079c450b5be9a558e77ad71c859f755968953eccc161ac01a30618f0b8f0826107c2eef9568c0c880b49a993015c19918dea8c5490791ebb6595044c402cfff59efc04f79ae433bba995958fb18bb2cd2b97abb428d04cefa72d98044e6fa5033412c302685cfa3ee29603a6e0283cdecc89ddfc1f227ae64c5665e39491826206ff8495e7b492b1bf830c649fe9201742252337578c04220165007c767b3d92c289783c15971b116995292c4c62a1b3bc"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x425}}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "31d2cbdae8e6dcf1c2d51b93aaef34edcc537d2121a15fbadb39ed16fd3127f168d8408d291f1b6d7a5a72b53a8573580b6d9947b51f3aa9b8b9030de98d94ae25f4c0c5061a0066bf764bf009c25f49cf5434195a514274fc4d97e96373ebd8afe5538968532629c5a6fb1f2aa0fa69d79c4dd114fa88d36465a3546c0803cca9bba2c333d94637458b6d64320d1b86920cf88bede0e92dad83f54ec1d206f67a5fe28c56eba105af66e7e06e264672ef90d4feaa8e50f0e4b9190cdfc87e072b3930bb84507b98cd85"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f0000000580)=@string={0x50, 0x3, "29d1c8eddd377c14d0c97928397e46e8ebc82f72366e977a36994ddc5e25195431e7a7189102aa2fc07a931a5c72081be1762bc36643553712a1543235c5702f6d61cbdd098602f003638e65e9af"}}, {0xdd, &(0x7f0000000600)=@string={0xdd, 0x3, "2bb06ae52d15e939c68a32a2bee9e359a2d92057508f42e9ab2e2069d564749b695e6deb699b85fa5df91f3ce3fa6a82e7ecb540f52ebfd9de646740cc9256af5a0ed696a26d8a549a43e6309523fda9005e44256736bd61d837de28da05e28f6d58abc66bf99cf5054eb453807b74ad0b84cf55fe002732eb441653dcdcc998ef8c95efb94a2295b862665b678ae68717fe6371f1dbc09887a77cf0422556895b7f6345cbbda610a50b11ec41962c4583ab3c6358863cbf77e64c58418ebf67579f68e9494068752e510aca368f196133c1a5139aae485d4f45bb"}}]}) 05:58:48 executing program 1: prctl$PR_SET_FPEXC(0x59616d61, 0x20000) 05:58:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x5450, 0x0) 05:58:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000280)) 05:58:48 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) 05:58:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8008551d, 0x0) 05:58:48 executing program 3: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x200012be, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0xffe, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid}, {@fsuuid}]}) 05:58:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 324.632918][ T3786] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 324.883662][ T3786] usb 5-1: Using ep0 maxpacket: 8 [ 325.023623][ T3786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.033205][ T3786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.203104][ T3786] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.210415][ T3786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.216093][ T3786] usb 5-1: Product: Х [ 325.218964][ T3786] usb 5-1: Manufacturer: 祺谤灬瑱羥⊌䓳ﭾ䱬⏦᪽᱇檽⣮翝摟仚䷬껝쐊慵⎍啤᳟嚰싙ࠬർ໵稐槽썈߲䖜嬋ꗩ흺蔜疟桙㺕쇌걡ꌁ᠆룰苰ݡ囹ಌஈꥉƓᥜ趑質達ṹ斻ҕ䁌Ｌ黵Ӽ髷㏤ꦻ閕놏늋⯍ꮗ⢴䳐꟯頭丄ꕯ㐃쌒栂臭Ζ㰨쳞ῼ稢䳦敖铣芑٢蓿銴뾱ಃ齤⃩䈗⌥圷ҌĢe發㵻슒碉ᔼᮗ椑⦕䰬ꅢ벳 [ 325.241140][ T3786] usb 5-1: SerialNumber: 툱헂錛双ⅽꄡ멟㧛᛭ㇽ赀Ἡ洛婺땲蔺塳洋䞙᾵ꤺ릸ഃ跩꺔엀ᨆ昀皿숉䥟哏ᤴ党瑂䷼獣襓卨⤦ꛅΏꀪ槺鳗텍﨔펈敤咣࡬찃뮩쎢㝆譅摭ല蘛ಒ诸ⷩ莭仵틁彺賢֡暯♮牆郯ﻔ躪매ఙ죟ݾ㤫묰傄须藍 [ 325.646904][ T3786] usb 5-1: 0:2 : does not exist [ 325.663283][ T3786] usb 5-1: USB disconnect, device number 18 05:58:50 executing program 0: prctl$PR_SET_FPEXC(0x4, 0x2) 05:58:50 executing program 1: prctl$PR_SET_FPEXC(0x34, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x817, 0x160a82) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0xec, 0x20}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xff, 0x7, 0x40}, 0x34, &(0x7f0000000140)={0x5, 0xf, 0x34, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "c3afe46f3b7b11183b5452b4265570fc"}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x5e, 0xf000, 0x401, [0x0, 0x0]}]}, 0x5, [{0x6b, &(0x7f0000000340)=@string={0x6b, 0x3, "c7fb1e7550bdb29b9908f4e7513e59f76cb563a9988d2d99dd6c644fbd5ee2893255ad84ff1de17f24419de69ed1c9b789d16466fcdc748f5a15acfe23c4645dc5b3054d8dec6c82dcb48718da0c71b71705b9c70f9b84791fac5e7bd3f5a45fa54ab8ed97afb12bf3"}}, {0x4a, &(0x7f0000000440)=@string={0x4a, 0x3, "8ed888eb429c47a834b15d171c411a8d400c32f8bb2b64844c2d2e9302ec1620c903002c47fff8b85da38345436864e06d292e428abf89634e2eb7ba9daebec6e32002dfa38c71cc"}}, {0x37, &(0x7f0000000540)=@string={0x37, 0x3, "a66947a1fa3626e4bb5e0217aba07edf776e68f639306ca54ad2c15e35dd4c458b1d7d85221a9360939d3b10af42700dcf024cb0bc"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x0, 0x0}]}) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FROZEN\x00', 0x7) 05:58:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8008551d, &(0x7f0000000040)) 05:58:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xbe8, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x494, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x2c8, 0x5, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x362}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}]}]}, 0xec4}}, 0x20000000) 05:58:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8008550e, &(0x7f0000000040)) 05:58:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xbe8, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x494, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x2c8, 0x5, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}]}]}, 0xec4}}, 0x0) 05:58:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xbe8, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5e}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x494, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x2c8, 0x5, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x362}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}]}]}, 0xec4}}, 0x0) 05:58:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8008550e, &(0x7f0000000040)) 05:58:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x8, 0x0, &(0x7f00000000c0)) [ 326.293065][ T3786] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 326.633031][ T3786] usb 6-1: not running at top speed; connect to a high speed hub [ 326.723072][ T3786] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.731549][ T3786] usb 6-1: config 1 interface 0 has no altsetting 0 [ 326.905462][ T3786] usb 6-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 326.913857][ T3786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.920753][ T3786] usb 6-1: Product: 榦ꅇ㛺庻ᜂꂫ湷〹ꕬ퉊廁䕌ᶋ蕽ᨢ悓鶓ျ䊯൰ˏ끌 [ 326.928743][ T3786] usb 6-1: Manufacturer: 鱂ꡇ넴᝝䄜贚ీ⮻葤ⵌ錮‖ωⰀｇ룸ꍝ䖃桃⥭䈮뾊掉⹎몷꺝욾⃣貣챱 [ 326.939334][ T3786] usb 6-1: SerialNumber: Ќ [ 327.303288][ T3786] usbhid 6-1:1.0: can't add hid device: -22 [ 327.307797][ T3786] usbhid: probe of 6-1:1.0 failed with error -22 [ 327.329303][ T3786] usb 6-1: USB disconnect, device number 9 05:58:52 executing program 1: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) 05:58:52 executing program 0: prctl$PR_SET_FPEXC(0x35, 0x2) 05:58:52 executing program 2: syz_usb_connect$uac1(0x0, 0xd2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x1, 0x20, 0xdb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x4, 0x6, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x2], 0x4}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x8, 0x3, 0x1, 0x5, 0x6], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x2, 0x3, 0x2, 0x3, 0x6}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0x8, 0x1, 0x5, 0x2, 0x6], 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xf9, 0x1, 0xa1, {0x7, 0x25, 0x1, 0x81, 0x4, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x1, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x3, 0x96, 0xcc, "413ab3e33519bc77"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7f, 0x1, '?', '*'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x5, 0xfe, {0x7, 0x25, 0x1, 0x1, 0x5, 0x81}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x40, 0x5, 0xf5, 0xff, 0xbf}, 0x8a, &(0x7f0000000140)={0x5, 0xf, 0x8a, 0x1, [@generic={0x85, 0x10, 0x0, "11b180a6ba3b4e17fad27f36baa581b443a66b051a81333eb54a4c5c95d8ac09bef9ea364d5bda0af849742b068bc19fe1a856c327a4926ecee213b44ecfd2eaeb566849a52ff1f2ad430a8b70019360b3140fea90eaf9e5997329fdf351e6e45c4fb2f3c6e56b0e1647e3fcb92215b946a9a24b5cabf1faf34576a8858245cbcb8c"}]}, 0x8, [{0xbf, &(0x7f0000000200)=@string={0xbf, 0x3, "101b06297160eaae56da89bf0959fb3e17937f7f18daea416559a65a3d2ce151bc12a1e5e7038459087fa684f1bad1650f1c5aea13aa80ce56bd58794ce28f9e319720086ad1d2dc2bb0b237021647ef5be7a62d0c35f120fef8078a53e6e904bd16d53e8367d65ecd1ec7d7c4539e9060a1a4aa5f00cd236547c76b4c59d3ad5a52cd20edd498369c86426cc489f574859b090cf988787c55d45c10a66ec42763772d1e1c65c84be2f6fa348bf477b11b6066b1dccabfc674dabff343"}}, {0xfa, &(0x7f00000002c0)=@string={0xfa, 0x3, "7a79248c6c70a1faa57f8c22f3447efb6c4ce623fde6bd1a01ec471cbd6aee28dd7f5f64da4ecbe8ec4dddae0ac475618d236455df1cb056d9c22c087c0df50e107afd6948c3f2079c450b5be9a558e77ad71c859f755968953eccc161ac01a30618f0b8f0826107c2eef9568c0c880b49a993015c19918dea8c5490791ebb6595044c402cfff59efc04f79ae433bba995958fb18bb2cd2b97abb428d04cefa72d98044e6fa5033412c302685cfa3ee29603a6e0283cdecc89ddfc1f227ae64c5665e39491826206ff8495e7b492b1bf830c649fe9201742252337578c04220165007c767b3d92c289783c15971b116995292c4c62a1b3bc"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x425}}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "31d2cbdae8e6dcf1c2d51b93aaef34edcc537d2121a15fbadb39ed16fd3127f168d8408d291f1b6d7a5a72b53a8573580b6d9947b51f3aa9b8b9030de98d94ae25f4c0c5061a0066bf764bf009c25f49cf5434195a514274fc4d97e96373ebd8afe5538968532629c5a6fb1f2aa0fa69d79c4dd114fa88d36465a3546c0803cca9bba2c333d94637458b6d64320d1b86920cf88bede0e92dad83f54ec1d206f67a5fe28c56eba105af66e7e06e264672ef90d4feaa8e50f0e4b9190cdfc87e072b3930bb84507b98cd85"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f0000000580)=@string={0x50, 0x3, "29d1c8eddd377c14d0c97928397e46e8ebc82f72366e977a36994ddc5e25195431e7a7189102aa2fc07a931a5c72081be1762bc36643553712a1543235c5702f6d61cbdd098602f003638e65e9af"}}, {0xdd, &(0x7f0000000600)=@string={0xdd, 0x3, "2bb06ae52d15e939c68a32a2bee9e359a2d92057508f42e9ab2e2069d564749b695e6deb699b85fa5df91f3ce3fa6a82e7ecb540f52ebfd9de646740cc9256af5a0ed696a26d8a549a43e6309523fda9005e44256736bd61d837de28da05e28f6d58abc66bf99cf5054eb453807b74ad0b84cf55fe002732eb441653dcdcc998ef8c95efb94a2295b862665b678ae68717fe6371f1dbc09887a77cf0422556895b7f6345cbbda610a50b11ec41962c4583ab3c6358863cbf77e64c58418ebf67579f68e9494068752e510aca368f196133c1a5139aae485d4f45bb"}}]}) 05:58:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8008550e, &(0x7f0000000040)) 05:58:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045510, &(0x7f0000000040)) 05:58:52 executing program 1: prctl$PR_SET_FPEXC(0x34, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 05:58:52 executing program 0: syz_usb_connect$uac1(0x0, 0xc4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x1, 0x0, 0xdb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x4, 0x6, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x4, 0x1, [0x2], 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x8, 0x1, 0x5, 0x6], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x0, 0x3, 0x2, 0x3, 0x6}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x5, 0x4, [0x8, 0x5, 0x2, 0x6], 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xf9, 0x0, 0xa1, {0x7, 0x25, 0x1, 0x81, 0x4, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x1, 0x2}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x3, 0x96, 0xcc, "413ab3e33519bc77"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x5, 0xfe, {0x7, 0x25, 0x1, 0x1, 0x5, 0x81}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x40, 0x5, 0xf5, 0xff, 0xbf}, 0x8a, &(0x7f0000000140)={0x5, 0xf, 0x8a, 0x1, [@generic={0x85, 0x10, 0x0, "11b180a6ba3b4e17fad27f36baa581b443a66b051a81333eb54a4c5c95d8ac09bef9ea364d5bda0af849742b068bc19fe1a856c327a4926ecee213b44ecfd2eaeb566849a52ff1f2ad430a8b70019360b3140fea90eaf9e5997329fdf351e6e45c4fb2f3c6e56b0e1647e3fcb92215b946a9a24b5cabf1faf34576a8858245cbcb8c"}]}, 0x8, [{0x90, &(0x7f0000000200)=@string={0x90, 0x3, "101b06297160eaae56da89bf0959fb3e17937f7f18daea416559a65a3d2ce151bc12a1e5e7038459087fa684f1bad1650f1c5aea13aa80ce56bd58794ce28f9e319720086ad1d2dc2bb0b237021647ef5be7a62d0c35f120fef8078a53e6e904bd16d53e8367d65ecd1ec7d7c4539e9060a1a4aa5f00cd236547c76b4c59d3ad5a52cd20edd498369c86426cc489"}}, {0xfa, &(0x7f00000002c0)=@string={0xfa, 0x3, "7a79248c6c70a1faa57f8c22f3447efb6c4ce623fde6bd1a01ec471cbd6aee28dd7f5f64da4ecbe8ec4dddae0ac475618d236455df1cb056d9c22c087c0df50e107afd6948c3f2079c450b5be9a558e77ad71c859f755968953eccc161ac01a30618f0b8f0826107c2eef9568c0c880b49a993015c19918dea8c5490791ebb6595044c402cfff59efc04f79ae433bba995958fb18bb2cd2b97abb428d04cefa72d98044e6fa5033412c302685cfa3ee29603a6e0283cdecc89ddfc1f227ae64c5665e39491826206ff8495e7b492b1bf830c649fe9201742252337578c04220165007c767b3d92c289783c15971b116995292c4c62a1b3bc"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x425}}, {0x81, &(0x7f0000000400)=@string={0x81, 0x3, "31d2cbdae8e6dcf1c2d51b93aaef34edcc537d2121a15fbadb39ed16fd3127f168d8408d291f1b6d7a5a72b53a8573580b6d9947b51f3aa9b8b9030de98d94ae25f4c0c5061a0066bf764bf009c25f49cf5434195a514274fc4d97e96373ebd8afe5538968532629c5a6fb1f2aa0fa69d79c4dd114fa88d36465a3546c0803"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f0000000580)=@string={0x50, 0x3, "29d1c8eddd377c14d0c97928397e46e8ebc82f72366e977a36994ddc5e25195431e7a7189102aa2fc07a931a5c72081be1762bc36643553712a1543235c5702f6d61cbdd098602f003638e65e9af"}}, {0xdd, &(0x7f0000000600)=@string={0xdd, 0x3, "2bb06ae52d15e939c68a32a2bee9e359a2d92057508f42e9ab2e2069d564749b695e6deb699b85fa5df91f3ce3fa6a82e7ecb540f52ebfd9de646740cc9256af5a0ed696a26d8a549a43e6309523fda9005e44256736bd61d837de28da05e28f6d58abc66bf99cf5054eb453807b74ad0b84cf55fe002732eb441653dcdcc998ef8c95efb94a2295b862665b678ae68717fe6371f1dbc09887a77cf0422556895b7f6345cbbda610a50b11ec41962c4583ab3c6358863cbf77e64c58418ebf67579f68e9494068752e510aca368f196133c1a5139aae485d4f45bb"}}]}) 05:58:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8008550e, &(0x7f0000000040)) 05:58:52 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) [ 327.993324][ T173] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 328.023020][ T15] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 328.073041][ T3284] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 328.113350][ T51] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 328.263007][ T173] usb 7-1: Using ep0 maxpacket: 8 [ 328.323368][ T3284] usb 5-1: Using ep0 maxpacket: 8 [ 328.403377][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 328.453315][ T3284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.460890][ T3284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.483279][ T51] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 328.503158][ T173] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.511711][ T173] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.583126][ T15] usb 6-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 328.589651][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.596160][ T15] usb 6-1: Product: syz [ 328.599243][ T15] usb 6-1: Manufacturer: syz [ 328.602604][ T15] usb 6-1: SerialNumber: syz [ 328.635188][ T3284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.642330][ T3284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.648491][ T51] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.656877][ T15] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 328.666497][ T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.671692][ T51] usb 8-1: Product: syz [ 328.674794][ T3284] usb 5-1: Product: Х [ 328.677295][ T3284] usb 5-1: Manufacturer: 祺谤灬瑱羥⊌䓳ﭾ䱬⏦᪽᱇檽⣮翝摟仚䷬껝쐊慵⎍啤᳟嚰싙ࠬർ໵稐槽썈߲䖜嬋ꗩ흺蔜疟桙㺕쇌걡ꌁ᠆룰苰ݡ囹ಌஈꥉƓᥜ趑質達ṹ斻ҕ䁌Ｌ黵Ӽ髷㏤ꦻ閕놏늋⯍ꮗ⢴䳐꟯頭丄ꕯ㐃쌒栂臭Ζ㰨쳞ῼ稢䳦敖铣芑٢蓿銴뾱ಃ齤⃩䈗⌥圷ҌĢe發㵻슒碉ᔼᮗ椑⦕䰬ꅢ벳 [ 328.698927][ T51] usb 8-1: Manufacturer: syz [ 328.701905][ T51] usb 8-1: SerialNumber: syz [ 328.705528][ T3284] usb 5-1: SerialNumber: 툱헂錛双ⅽꄡ멟㧛᛭ㇽ赀Ἡ洛婺땲蔺塳洋䞙᾵ꤺ릸ഃ跩꺔엀ᨆ昀皿숉䥟哏ᤴ党瑂䷼獣襓卨⤦ꛅΏꀪ槺鳗텍﨔펈敤咣࡬ [ 328.724116][ T173] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.730451][ T173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.736202][ T173] usb 7-1: Product: Х [ 328.738936][ T173] usb 7-1: Manufacturer: 祺谤灬瑱羥⊌䓳ﭾ䱬⏦᪽᱇檽⣮翝摟仚䷬껝쐊慵⎍啤᳟嚰싙ࠬർ໵稐槽썈߲䖜嬋ꗩ흺蔜疟桙㺕쇌걡ꌁ᠆룰苰ݡ囹ಌஈꥉƓᥜ趑質達ṹ斻ҕ䁌Ｌ黵Ӽ髷㏤ꦻ閕놏늋⯍ꮗ⢴䳐꟯頭丄ꕯ㐃쌒栂臭Ζ㰨쳞ῼ稢䳦敖铣芑٢蓿銴뾱ಃ齤⃩䈗⌥圷ҌĢe發㵻슒碉ᔼᮗ椑⦕䰬ꅢ벳 [ 328.754091][ T51] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 328.762387][ T173] usb 7-1: SerialNumber: 툱헂錛双ⅽꄡ멟㧛᛭ㇽ赀Ἡ洛婺땲蔺塳洋䞙᾵ꤺ릸ഃ跩꺔엀ᨆ昀皿숉䥟哏ᤴ党瑂䷼獣襓卨⤦ꛅΏꀪ槺鳗텍﨔펈敤咣࡬찃뮩쎢㝆譅摭ല蘛ಒ诸ⷩ莭仵틁彺賢֡暯♮牆郯ﻔ躪매ఙ죟ݾ㤫묰傄须藍 [ 328.850262][ T3761] usb 6-1: USB disconnect, device number 10 [ 328.960687][ T3787] usb 8-1: USB disconnect, device number 14 [ 329.083261][ T3284] usb 5-1: 0:2 : does not exist [ 329.091702][ T3284] usb 5-1: USB disconnect, device number 19 [ 329.173150][ T173] usb 7-1: 0:2 : does not exist [ 329.188276][ T173] usb 7-1: USB disconnect, device number 15 [ 329.229603][ T4836] udevd[4836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 05:58:53 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5768}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 05:58:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045510, 0x0) 05:58:53 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 05:58:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0x8) 05:58:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045515, 0x0) 05:58:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80085504, &(0x7f0000000040)) [ 329.643082][ T15] usb 6-1: new high-speed USB device number 11 using dummy_hcd 05:58:54 executing program 0: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x4900, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0xffe, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid}, {@fsuuid}]}) [ 329.645285][ T6812] usb usb2: usbfs: process 6812 (syz-executor.2) did not claim interface 0 before use 05:58:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80085504, &(0x7f0000000040)) [ 329.729222][ T6816] usb usb2: usbfs: process 6816 (syz-executor.2) did not claim interface 0 before use [ 329.771219][ T6814] loop0: detected capacity change from 0 to 264192 [ 329.813140][ T173] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 329.834177][ T4836] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 330.024058][ T15] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 330.034069][ T15] usb 6-1: config 1 interface 0 has no altsetting 0 [ 330.183108][ T173] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 330.224171][ T15] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.230074][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.236005][ T15] usb 6-1: Product: syz [ 330.239120][ T15] usb 6-1: Manufacturer: syz [ 330.242536][ T15] usb 6-1: SerialNumber: syz [ 330.263383][ T6802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.353331][ T173] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.360382][ T173] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.366294][ T173] usb 8-1: Product: syz [ 330.369428][ T173] usb 8-1: Manufacturer: syz [ 330.372423][ T173] usb 8-1: SerialNumber: syz [ 330.425158][ T173] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 330.513974][ T15] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 330.520419][ T15] usb 6-1: USB disconnect, device number 11 [ 330.630554][ T3754] usb 8-1: USB disconnect, device number 15 05:58:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105500, &(0x7f0000000040)) 05:58:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80085504, &(0x7f0000000040)) [ 331.034621][ T6818] usb usb2: usbfs: process 6818 (syz-executor.2) did not claim interface 0 before use 05:58:55 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 05:58:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote}, 0x10) 05:58:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80085504, &(0x7f0000000040)) 05:58:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105500, &(0x7f0000000040)) 05:58:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105500, &(0x7f0000000040)) [ 331.224595][ T6826] usb usb2: usbfs: process 6826 (syz-executor.2) did not claim interface 0 before use 05:58:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105500, &(0x7f0000000040)) 05:58:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105500, &(0x7f0000000040)) 05:58:55 executing program 2: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x4900, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0xffe, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr={'pcr', 0x3d, 0x3e}}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid}, {@fsuuid}]}) [ 331.461501][ T6836] loop2: detected capacity change from 0 to 264192 [ 331.473022][ T3754] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 331.883296][ T3754] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 332.053623][ T3754] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.059999][ T3754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.065502][ T3754] usb 8-1: Product: syz [ 332.068309][ T3754] usb 8-1: Manufacturer: syz [ 332.071372][ T3754] usb 8-1: SerialNumber: syz [ 332.115379][ T3754] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 332.321673][ T3787] usb 8-1: USB disconnect, device number 16 05:58:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105500, &(0x7f0000000040)) 05:58:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105500, &(0x7f0000000040)) 05:58:57 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 05:58:57 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080), 0x207, 0x4d00b) 05:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x5609, &(0x7f0000000080)) 05:58:57 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) 05:58:57 executing program 1: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 05:58:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x0, 0x0, 0x7}, 0x48) 05:58:57 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) 05:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x5609, &(0x7f0000000080)) [ 333.133146][ T173] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 333.193133][ T3754] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 333.243277][ T51] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 333.546820][ T173] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 333.653054][ T3754] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 333.659178][ T3754] usb 6-1: can't read configurations, error -71 [ 333.663190][ T51] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 333.671640][ T51] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 333.679641][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 333.723494][ T173] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.731294][ T173] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.737233][ T173] usb 8-1: Product: syz [ 333.740381][ T173] usb 8-1: Manufacturer: syz [ 333.743623][ T173] usb 8-1: SerialNumber: syz [ 333.805695][ T173] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 333.874748][ T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.879983][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.885717][ T51] usb 5-1: Product: syz [ 333.888344][ T51] usb 5-1: Manufacturer: syz [ 333.891596][ T51] usb 5-1: SerialNumber: syz [ 333.924287][ T6856] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 333.928875][ T6856] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 334.011225][ T173] usb 8-1: USB disconnect, device number 17 [ 334.223507][ T51] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 334.231506][ T51] usb 5-1: USB disconnect, device number 20 [ 334.237826][ T4836] udevd[4836]: setting mode of /dev/bus/usb/005/020 to 020664 failed: No such file or directory [ 334.246801][ T4836] udevd[4836]: setting owner of /dev/bus/usb/005/020 to uid=0, gid=0 failed: No such file or directory 05:58:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x5609, &(0x7f0000000080)) 05:58:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0x0, 0x0}) 05:58:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4004551e, 0x0) 05:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x5609, &(0x7f0000000080)) 05:58:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0185500, 0x0) 05:58:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4008550d, 0x0) 05:58:59 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) 05:58:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0xec4, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xbe8, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe72}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x189}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xeb9a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xba}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x65}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf744}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4fe6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x494, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x2c8, 0x5, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x24004800}, 0x20000000) 05:58:59 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x207, 0x0) 05:58:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045519, &(0x7f0000000040)) 05:58:59 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xfe, 0x7}}}}}]}}]}}, 0x0) 05:58:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x551f, 0x0) 05:58:59 executing program 3: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x0, 0x5]) 05:58:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8008551c, &(0x7f0000000040)) [ 334.752413][ T39] audit: type=1400 audit(1656395939.193:249): avc: denied { read } for pid=6882 comm="syz-executor.3" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 334.772329][ T39] audit: type=1400 audit(1656395939.193:250): avc: denied { open } for pid=6882 comm="syz-executor.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 334.788686][ T39] audit: type=1400 audit(1656395939.193:251): avc: denied { ioctl } for pid=6882 comm="syz-executor.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 334.972951][ T51] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 334.992997][ T3284] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 335.373316][ T51] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 335.379076][ T51] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 335.386661][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 335.394511][ T3284] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 335.399959][ T3284] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 335.405858][ T3284] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 335.573121][ T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.580159][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.586070][ T3284] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.592506][ T3284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.597676][ T51] usb 5-1: Product: syz [ 335.600202][ T51] usb 5-1: Manufacturer: syz [ 335.603205][ T51] usb 5-1: SerialNumber: syz [ 335.607115][ T3284] usb 6-1: Product: syz [ 335.609770][ T3284] usb 6-1: Manufacturer: syz [ 335.612702][ T3284] usb 6-1: SerialNumber: syz [ 335.633423][ T6877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.633500][ T6880] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.638478][ T6877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.644874][ T6880] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.893446][ T3284] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 335.903544][ T3284] usb 6-1: USB disconnect, device number 14 [ 335.933544][ T51] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 335.940680][ T51] usb 5-1: USB disconnect, device number 21 05:59:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_RESETEP(r0, 0x80045510, &(0x7f0000000040)) 05:59:00 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) 05:59:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x802c550a, &(0x7f0000000040)) 05:59:00 executing program 1: prctl$PR_SET_FPEXC(0x35, 0x7) 05:59:00 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)='-\x00') shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) 05:59:00 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x5d, &(0x7f0000000240)=@string={0x5d, 0x3, "70da781ff4937495600391256fee75b5f7232d9f96c0ab8e09f2774707b662bb045ed3de6d0e183e7c2a79fdfac6b30de4be5faf64840738dfac4f7ee71b81864da84519fede43c6c21c217e8c9746c84ca9694c6f31840c53e1fc"}}, {0x2, &(0x7f0000000340)=@string={0x2}}]}) 05:59:00 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x81}}}}}}}]}}, 0x0) 05:59:00 executing program 2: prctl$PR_SET_FPEXC(0x3e, 0x7) [ 336.683118][ T51] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 336.743014][ T3758] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 336.743187][ T3284] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 336.983315][ T3758] usb 8-1: Using ep0 maxpacket: 32 [ 337.032954][ T3284] usb 6-1: Using ep0 maxpacket: 8 [ 337.063130][ T51] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 337.070177][ T51] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 337.076943][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 337.113499][ T3758] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.121901][ T3758] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.130412][ T3758] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.153300][ T3284] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 337.161245][ T3284] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 337.169892][ T3284] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.243133][ T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.249773][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.255825][ T51] usb 5-1: Product: syz [ 337.258986][ T51] usb 5-1: Manufacturer: syz [ 337.262354][ T51] usb 5-1: SerialNumber: syz [ 337.283654][ T6892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 337.288650][ T6892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 337.333064][ T3284] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.333248][ T3758] usb 8-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 337.338743][ T3284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.344818][ T3758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.344837][ T3758] usb 8-1: Product: syz [ 337.350186][ T3284] usb 6-1: Product: syz [ 337.356240][ T3758] usb 8-1: SerialNumber: syz [ 337.359260][ T3284] usb 6-1: Manufacturer: syz [ 337.369057][ T3284] usb 6-1: SerialNumber: syz [ 337.563372][ T51] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 337.570598][ T51] usb 5-1: USB disconnect, device number 22 [ 337.634622][ T3758] usbhid 8-1:1.0: can't add hid device: -22 [ 337.639234][ T3758] usbhid: probe of 8-1:1.0 failed with error -22 [ 337.648964][ T3758] usb 8-1: USB disconnect, device number 18 [ 337.693178][ T3284] usb 6-1: 0:2 : does not exist [ 337.703500][ T3284] usb 6-1: USB disconnect, device number 15 [ 337.723183][ T4836] udevd[4836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:59:02 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}]}}, 0x0) 05:59:02 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) 05:59:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x5514, 0x0) 05:59:02 executing program 1: prctl$PR_SET_FPEXC(0x1d, 0x2) 05:59:02 executing program 1: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0xa1, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x1}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 05:59:02 executing program 3: syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x1, 0x20, 0xdb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}, [@feature_unit={0x11, 0x24, 0x6, 0x0, 0x6, 0x5, [0x0, 0x0, 0x1, 0x0, 0x0], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x2, 0x3, 0x2, 0x0, 0x6}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x0, 0x5, [0x8, 0x1, 0x5, 0x0, 0x6], 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xf9, 0x1, 0xa1, {0x7, 0x25, 0x1, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x0, 0x96, 0x0, "413ab3e3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x7f, 0x1, '?'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x5, 0xfe, {0x7, 0x25, 0x1, 0x0, 0x5}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@generic={0x3}]}, 0x5, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0xf1, &(0x7f00000002c0)=@string={0xf1, 0x3, "7a79248c6c70a1faa57f8c22f3447efb6c4ce623fde6bd1a01ec471cbd6aee28dd7f5f64da4ecbe8ec4dddae0ac475618d236455df1cb056d9c22c087c0df50e107afd6948c3f2079c450b5be9a558e77ad71c859f755968953eccc161ac01a30618f0b8f0826107c2eef9568c0c880b49a993015c19918dea8c5490791ebb6595044c402cfff59efc04f79ae433bba995958fb18bb2cd2b97abb428d04cefa72d98044e6fa5033412c302685cfa3ee29603a6e0283cdecc89ddfc1f227ae64c5665e39491826206ff8495e7b492b1bf830c649fe9201742252337578c04220165007c767b3d92c289783c15971b11"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x67, &(0x7f0000000400)=@string={0x67, 0x3, "31d2cbdae8e6dcf1c2d51b93aaef34edcc537d2121a15fbadb39ed16fd3127f168d8408d291f1b6d7a5a72b53a8573580b6d9947b51f3aa9b8b9030de98d94ae25f4c0c5061a0066bf764bf009c25f49cf5434195a514274fc4d97e96373ebd8afe5538968"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc04}}]}) [ 338.303148][ T3761] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 338.309931][ T3787] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 338.453081][ T3758] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 338.473086][ T34] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 338.583121][ T3761] usb 7-1: Using ep0 maxpacket: 8 [ 338.702999][ T3758] usb 6-1: Using ep0 maxpacket: 8 [ 338.723232][ T3787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 338.724364][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 338.729736][ T3787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 338.740030][ T3761] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 338.746737][ T3761] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 338.754347][ T3787] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 338.764149][ T3761] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.833629][ T3758] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 338.841337][ T3758] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.850018][ T3758] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.857493][ T34] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 338.865918][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.923122][ T3761] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.929097][ T3787] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.934729][ T34] usb 8-1: language id specifier not provided by device, defaulting to English [ 338.940162][ T3787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.945590][ T3761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.950579][ T3761] usb 7-1: Product: syz [ 338.953624][ T3761] usb 7-1: Manufacturer: syz [ 338.956473][ T3761] usb 7-1: SerialNumber: syz [ 338.959873][ T3787] usb 5-1: Product: syz [ 338.962477][ T3787] usb 5-1: Manufacturer: syz [ 338.966594][ T3787] usb 5-1: SerialNumber: syz [ 338.983869][ T6906] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 338.990615][ T6906] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 339.073733][ T34] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.079474][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.085357][ T34] usb 8-1: Manufacturer: 祺谤灬瑱羥⊌䓳ﭾ䱬⏦᪽᱇檽⣮翝摟仚䷬껝쐊慵⎍啤᳟嚰싙ࠬർ໵稐槽썈߲䖜嬋ꗩ흺蔜疟桙㺕쇌걡ꌁ᠆룰苰ݡ囹ಌஈꥉƓᥜ趑質達ṹ斻ҕ䁌Ｌ黵Ӽ髷㏤ꦻ閕놏늋⯍ꮗ⢴䳐꟯頭丄ꕯ㐃쌒栂臭Ζ㰨쳞ῼ稢䳦敖铣芑٢蓿銴뾱ಃ齤⃩䈗⌥圷ҌĢe發㵻슒碉ᔼᮗ [ 339.109566][ T34] usb 8-1: SerialNumber: 툱헂錛双ⅽꄡ멟㧛᛭ㇽ赀Ἡ洛婺땲蔺塳洋䞙᾵ꤺ릸ഃ跩꺔엀ᨆ昀皿숉䥟哏ᤴ党瑂䷼獣襓 [ 339.163218][ T3758] usb 6-1: string descriptor 0 read error: -22 [ 339.168143][ T3758] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.176491][ T3758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.263245][ T3787] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 339.271100][ T3787] usb 5-1: USB disconnect, device number 23 [ 339.293744][ T3761] usb 7-1: 0:2 : does not exist [ 339.303469][ T3758] usb 6-1: 0:2 : does not exist [ 339.303517][ T3761] usb 7-1: USB disconnect, device number 16 [ 339.425583][ T173] usb 6-1: USB disconnect, device number 16 [ 339.473082][ T34] usb 8-1: 0:2 : does not exist [ 339.482726][ T34] usb 8-1: USB disconnect, device number 19 [ 339.523285][ T4836] udevd[4836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x5452, &(0x7f0000000080)) 05:59:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0185500, &(0x7f0000000040)) 05:59:04 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 05:59:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0xec4, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xbe8, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x189}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xeb9a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xba}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf744}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x494, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x2c8, 0x5, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x24004800}, 0x20000000) 05:59:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x5522, 0x0) 05:59:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc00c5512, &(0x7f0000000040)) 05:59:04 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 05:59:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/virtio_net', 0x0, 0x80) accept4$inet(r1, 0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x10, r1, 0x47) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x5, 0x3e, [0x4, 0xd0, 0x202e, 0x0, 0x0, 0x401], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=""/62}, &(0x7f00000001c0)=0x78) 05:59:04 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop1', 0x2040, 0x0) 05:59:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)) 05:59:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 05:59:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x541b, 0x0) 05:59:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)) 05:59:04 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6000) [ 340.213183][ T3761] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 340.413028][ T173] Bluetooth: hci0: command 0x0406 tx timeout [ 340.413034][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 340.413050][ T3787] Bluetooth: hci2: command 0x0406 tx timeout [ 340.413081][ T3758] Bluetooth: hci1: command 0x0406 tx timeout [ 340.613056][ T3761] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 340.794206][ T3761] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.800137][ T3761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.805665][ T3761] usb 5-1: Product: syz [ 340.808280][ T3761] usb 5-1: Manufacturer: syz [ 340.811290][ T3761] usb 5-1: SerialNumber: syz [ 340.854227][ T3761] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 341.061301][ T3758] usb 5-1: USB disconnect, device number 24 05:59:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x80045518, 0x0) 05:59:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x207, 0x4934a) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x9}) 05:59:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)) 05:59:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x5521, 0x0) 05:59:06 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0xc02c) 05:59:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)) 05:59:06 executing program 3: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) 05:59:06 executing program 2: prctl$PR_SET_FPEXC(0x2f, 0x2) 05:59:06 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000000)=@framed={{}, [@cb_func, @alu, @alu, @func, @btf_id, @generic]}, &(0x7f0000000080)='GPL\x00', 0x7, 0xd6, &(0x7f00000000c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:59:06 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xfffffffffffffffe) 05:59:06 executing program 2: prctl$PR_SET_FPEXC(0x38, 0x2) 05:59:06 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 05:59:06 executing program 3: prctl$PR_SET_FPEXC(0x16, 0x2) 05:59:06 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 05:59:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x1185, 0x1}, 0x48) 05:59:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @remote, 0x1}, 0x10) 05:59:06 executing program 3: prctl$PR_SET_FPEXC(0x34, 0x2) 05:59:06 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 05:59:06 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000040)={0x77359400}, 0x0) [ 341.943097][ T173] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 341.972985][ T3755] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 342.003094][ T3284] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 342.213053][ T3755] usb 5-1: Using ep0 maxpacket: 32 [ 342.253094][ T3284] usb 6-1: Using ep0 maxpacket: 32 [ 342.303209][ T173] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 342.335184][ T3755] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.345143][ T3755] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.383143][ T3284] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.483251][ T173] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.489550][ T173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.495280][ T173] usb 7-1: Product: syz [ 342.498621][ T173] usb 7-1: Manufacturer: syz [ 342.501694][ T173] usb 7-1: SerialNumber: syz [ 342.523480][ T6967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.543257][ T3284] usb 6-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 342.546438][ T173] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 342.549746][ T3284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.560391][ T3284] usb 6-1: Product: syz [ 342.563251][ T3284] usb 6-1: Manufacturer: syz [ 342.566197][ T3284] usb 6-1: SerialNumber: syz [ 342.605286][ T3284] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 342.663123][ T3755] usb 5-1: string descriptor 0 read error: -22 [ 342.667479][ T3755] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 342.673816][ T3755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.715260][ T3755] usbhid 5-1:1.0: can't add hid device: -22 [ 342.719057][ T3755] usbhid: probe of 5-1:1.0 failed with error -22 [ 342.749107][ T3787] usb 7-1: USB disconnect, device number 17 [ 342.806357][ T3755] usb 6-1: USB disconnect, device number 17 [ 342.915622][ T3284] usb 5-1: USB disconnect, device number 25 05:59:07 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000680)=@string={0x2}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}]}) 05:59:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x550b, 0x0) 05:59:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4004550d, 0x0) 05:59:07 executing program 0: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0x1fa, 0x6}], 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x6, 0x0, &(0x7f0000001540), 0x0, 0x0) 05:59:07 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 343.447009][ T6990] loop0: detected capacity change from 0 to 1 [ 343.456532][ T6990] Dev loop0: unable to read RDB block 1 [ 343.461266][ T6990] loop0: unable to read partition table [ 343.470019][ T6990] loop0: partition table beyond EOD, truncated 05:59:07 executing program 3: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0x200012be, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr={'pcr', 0x3d, 0x3e}}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x32], 0x2d, [0x7, 0x6b], 0x2d, [0x34, 0x0, 0x39, 0x34], 0x2d, [0x53, 0x38, 0x34], 0x2d, [0x66, 0x0, 0x35, 0x0, 0x65, 0x6, 0x30]}}}, {@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [], 0x2d, [], 0x2d, [0x0, 0x68, 0x39], 0x2d, [0x0, 0x63, 0x0, 0x0, 0x39, 0x0, 0x33, 0x65]}}}]}) 05:59:07 executing program 0: prctl$PR_SET_FPEXC(0x27, 0x2) 05:59:07 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x80282) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x0, 0x5]) [ 343.533070][ T3758] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 343.662173][ T6994] loop3: detected capacity change from 0 to 32766 [ 343.722935][ T3787] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 343.893108][ T3758] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 343.943052][ T3758] usb 7-1: language id specifier not provided by device, defaulting to English [ 344.063346][ T3758] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.070538][ T3758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.077047][ T3758] usb 7-1: Product: syz [ 344.080402][ T3758] usb 7-1: SerialNumber: syz [ 344.123982][ T3758] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 344.153131][ T3787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.160293][ T3787] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 344.167205][ T3787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.173725][ T3787] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 344.179819][ T3787] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 344.325753][ T3284] usb 7-1: USB disconnect, device number 18 [ 344.393138][ T3787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.399603][ T3787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.404958][ T3787] usb 6-1: Product: syz [ 344.407712][ T3787] usb 6-1: Manufacturer: syz [ 344.410700][ T3787] usb 6-1: SerialNumber: syz [ 344.455772][ T3787] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 344.659231][ T47] usb 6-1: USB disconnect, device number 18 05:59:09 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, 0x0) 05:59:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8010550e, &(0x7f0000000040)) 05:59:09 executing program 3: syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfa, 0x20, 0xeb, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x1cc, 0x1f, 0x1, {0x22, 0xa57}}, {{{0x9, 0x5, 0x81, 0x3, 0x208, 0x81, 0x3, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7f, 0x0, 0x63, 0x10, 0xff}, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="050f1a00020a100302bb3893afd5cd5f9b682735a4d919497404"]}) r0 = socket(0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfb, 0x1a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 05:59:09 executing program 2: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0xfffffffffffffdef, 0x6}, {&(0x7f0000000100)}, {0x0}, {0x0}], 0x100000, &(0x7f00000013c0)={[{']'}, {'nfs\x00'}, {'nfs\x00'}, {'nfs\x00'}, {'&\xc5'}, {'nfs\x00'}, {'*#,).'}, {'%{-\''}], [{@pcr}, {@subj_user}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'nfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x30], 0x2d, [0x0, 0x0, 0x33], 0x2d, [], 0x2d, [0x0, 0x0, 0x0, 0x38], 0x2d, [0x0, 0x0, 0x0, 0x0, 0x65]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x61, 0x0, 0x0, 0x62, 0x0, 0x0, 0x37], 0x2d, [0x0, 0x0, 0x0, 0x63], 0x2d, [], 0x2d, [0x0, 0x0, 0x39], 0x2d, [0x0, 0x0, 0x1, 0x64]}}}]}) [ 345.051703][ T7004] loop2: detected capacity change from 0 to 32766 [ 345.123023][ T3787] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 345.133079][ T3758] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 345.134396][ T4836] I/O error, dev loop2, sector 32512 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 05:59:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0x20) 05:59:09 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0004000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x20000600}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x111) connect$inet6(r4, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) shutdown(r4, 0x0) splice(r4, 0x0, r3, 0x0, 0x4000000000008ec0, 0x0) [ 345.178708][ T39] audit: type=1400 audit(1656395949.623:252): avc: denied { setopt } for pid=7005 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 05:59:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4b47, 0x0) [ 345.209687][ T39] audit: type=1400 audit(1656395949.653:253): avc: denied { connect } for pid=7008 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 05:59:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc7a8, 0x80282) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0xc0105502, &(0x7f0000000040)) [ 345.543140][ T3787] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 345.604258][ T3758] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 345.612993][ T3758] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.705380][ T3787] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.712450][ T3787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.720981][ T3787] usb 5-1: Product: syz [ 345.724131][ T3787] usb 5-1: Manufacturer: syz [ 345.727352][ T3787] usb 5-1: SerialNumber: syz [ 345.754042][ T7000] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 345.774586][ T3787] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 345.804100][ T3758] usb 8-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.40 [ 345.810119][ T3758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.815504][ T3758] usb 8-1: Product: syz [ 345.818285][ T3758] usb 8-1: Manufacturer: syz [ 345.821254][ T3758] usb 8-1: SerialNumber: syz [ 345.981812][ T3787] usb 5-1: USB disconnect, device number 26 [ 346.303250][ T3758] usbhid 8-1:1.0: can't add hid device: -71 [ 346.308417][ T3758] usbhid: probe of 8-1:1.0 failed with error -71 [ 346.317775][ T3758] usb 8-1: USB disconnect, device number 20 05:59:10 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 05:59:10 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0004000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x20000600}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x111) connect$inet6(r4, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) shutdown(r4, 0x0) splice(r4, 0x0, r3, 0x0, 0x4000000000008ec0, 0x0) 05:59:11 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x88) 05:59:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x4bfa, &(0x7f0000000080)) 05:59:11 executing program 2: ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x2e040) [ 346.586400][ T39] audit: type=1400 audit(1656395951.033:254): avc: denied { read } for pid=7024 comm="syz-executor.2" name="card1" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 05:59:11 executing program 0: syz_clone(0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="5f33e4c69386f372cb98d4421baa7e9c8266e23f115ad080b6dbfa99b311f18eba001855b4d8de907353df7f6b61473482cd45382cbe0618f53db61fa9ae21f23ddf62e3312463360a7aefc2aed38386aa8e3620c4c0858e7c0b9e4d2ee0abe86214ae6f1c6159fbd8b0ee78b3de68bbcd9532d5a851283e9840bf1d8001009bebd2bdc9f27f03328f454aa0d725cfb230a26d323974d2e264e217fa38366f2e63b994d647f69a7d3041b32d035edbec93c6033d604377f5d62658") 05:59:11 executing program 3: r0 = inotify_init() ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 05:59:11 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000680)=@string={0x4, 0x3, "a339"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}]}) [ 346.784783][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 346.903172][ T3755] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 347.174011][ T34] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 347.273100][ T3755] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 347.373119][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.379944][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.385235][ T34] usb 6-1: Product: syz [ 347.387879][ T34] usb 6-1: Manufacturer: syz [ 347.391399][ T34] usb 6-1: SerialNumber: syz [ 347.413340][ T7022] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 347.419356][ T7022] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 347.433796][ T34] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 347.448955][ T3755] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.455346][ T3755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.461493][ T3755] usb 7-1: Product: syz [ 347.465179][ T3755] usb 7-1: Manufacturer: ᐊ [ 347.468211][ T3755] usb 7-1: SerialNumber: syz [ 347.514447][ T3755] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 347.636825][ T3284] usb 6-1: USB disconnect, device number 19 [ 347.717750][ T3755] usb 7-1: USB disconnect, device number 19 05:59:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 05:59:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:12 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x9}) 05:59:12 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000440)=0x700) 05:59:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 05:59:12 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 348.192008][ T39] audit: type=1400 audit(1656395952.633:255): avc: denied { getopt } for pid=7045 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 05:59:12 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @private1, @mcast2, 0x0, 0x0, 0x460}) [ 348.207752][ T39] audit: type=1400 audit(1656395952.653:256): avc: denied { read } for pid=7049 comm="syz-executor.3" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 05:59:12 executing program 2: socketpair(0x11, 0xa, 0x0, &(0x7f0000000280)) [ 348.235347][ T39] audit: type=1400 audit(1656395952.653:257): avc: denied { open } for pid=7049 comm="syz-executor.3" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 05:59:12 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x42600, 0x0) 05:59:13 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000000) 05:59:13 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340), 0x8) 05:59:13 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 05:59:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:14 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 05:59:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 05:59:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:15 executing program 2: syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x2e040) 05:59:15 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 05:59:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="baf80c66b8c416538266efbafc0c66b80000008066efbaf80c66b8d869888d66efbafc0c66ed66b9d90200000f32d9e465260f0109baf80c66b83a78448266efbafc0ced0f20e06635040000000f22e00f01cff3803001660f3882783b", 0x5d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x7000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:15 executing program 1: syz_clone(0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="5f33e4c69386f372cb98d4421baa7e9c8266e23f115ad080b6dbfa99b311f18eba001855b4d8de907353df7f6b61473482cd45382cbe0618f53db61fa9ae21f23ddf62e3312463360a7aefc2aed38386aa8e3620c4c0858e7c0b9e4d2ee0abe86214ae6f1c6159fbd8b0ee78b3de68bbcd9532d5a851283e9840bf1d8001009bebd2bdc9f27f03328f454aa0d725cfb230a26d323974d2e264e217fa38366f2e63b994d647f69a7d3041b32d035edbec93c6033d604377f5d6265860c859498150c3feac0e12899beeeb348296") 05:59:15 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) unshare(0x0) 05:59:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) [ 350.750996][ T7113] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 05:59:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000400)=0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000000)) r4 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000a80)=[@text16={0x10, &(0x7f0000000a40)="baf80c66b840be848a66efbafc0c66b81700000066eff40f01c2f30f090fc736d3a62e640f019af300660f388091e5e2f20f11ac575cea0f00c3000f09", 0x3d}], 0x1, 0x20, &(0x7f0000000ac0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b40)=[@text32={0x20, &(0x7f0000000ac0)="0f209d66baf80cb8a0f64c88ef66bafc0cb82a636838ef66ba2000b059ee0f01ca9a660000004f00c4e135ddf6f30f09b9f40200000f322e0f01780026f3024200", 0x41}], 0x1, 0x80, &(0x7f0000000b80), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{}, {0x0, 0x0, 0x0, 0x0, 0xfd}]}) 05:59:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) 05:59:16 executing program 1: syz_clone(0x50980500, 0x0, 0x0, 0x0, 0x0, 0x0) 05:59:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/105, &(0x7f0000000080)=0x69) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)={0x0, 0x10, 0x2, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1a}, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x88) setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000280)=0x8000, 0x4) socket$l2tp6(0xa, 0x2, 0x73) [ 351.581725][ T39] audit: type=1400 audit(1656395956.023:258): avc: denied { sys_admin } for pid=7138 comm="syz-executor.1" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 05:59:16 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403"], 0x0) 05:59:16 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={@mcast2}) 05:59:16 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80}, 0x20) 05:59:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x100, 0x1f, 0x4, 0x3f, 0x40}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="051305"], 0x2, [{0xac, &(0x7f0000000340)=@string={0xac, 0x3, "5e4939f87a3b0db136239bbd76e4421fa4be599e3f68ed5c403e1cfa3997e4818ef2456d91556e1f4f3df21a8728faab2063865806bd640a274e67176d2b4c0f0fe4926c708cfb6f03525608388b87d914766936b5f6af60358a81feceb5fec52dd0739f71c1bd261477818c6cb73c02bc75f04aa24176d4d33308a7f2d20f7d10e1a5b5435b421071c2c8f2b2c93b6d73c9cf78c5557151830606a98c6c741ec9c1774cb3574d3f3933"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x409}}]}) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES8=r5, @ANYBLOB="0000000000000000000000000000010000000000", @ANYRES8=r2, @ANYBLOB="0000000000800000000000000010000000000000", @ANYRES64=r3, @ANYBLOB="00000000001000000000000000a001f1ffffffff", @ANYRES8=r6, @ANYBLOB="00000000008000000000000000f0ffff00000000", @ANYRES32=r5, @ANYBLOB="0000000082b9d5d8a1fae0ba5e00808005000000000040000000000000", @ANYRES32=r4, @ANYBLOB="000000ffffff0000000100"/20, @ANYRES64=r6, @ANYBLOB="000000000010002d3f0000000000000100000000", @ANYRESDEC=0x0]) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000080)="1ce1dc955c9144750dea65e327f6e9d024633ff12c312b22788123f7e1a32c7bd09e3bfe1a2508d1a14befad97e758c06f8f31036b609652d6e56248391ca10c6cf10763a9feb052f908d2acdf6adbc6feed98e7ed0e8caafbd99acebc889f79212d4f45a403b32f51e1bc00c71054cbef0bac6cb52aeb7a129bdb42c8d11e54ff619b806df1c734abdf728ee71b8b66d365952be429f639fd5809d2ec78b8de94496e83f80c4c6023014d5b14db2e92f13bcedaeb0a054fe8") ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000480)=0xe, 0x4) 05:59:16 executing program 3: socketpair(0x11, 0x0, 0x0, &(0x7f0000000280)) 05:59:16 executing program 1: syz_clone(0x50980500, 0x0, 0x0, 0x0, 0x0, 0x0) 05:59:16 executing program 3: openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 351.883097][ T3787] usb 7-1: new high-speed USB device number 20 using dummy_hcd 05:59:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x3}, 0x20) [ 351.973020][ T34] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 352.163000][ T3787] usb 7-1: Using ep0 maxpacket: 8 [ 352.213045][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 352.333228][ T3787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.373228][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 352.433400][ T3787] usb 7-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 352.439610][ T3787] usb 7-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 352.446618][ T3787] usb 7-1: Manufacturer: syz [ 352.451902][ T3787] usb 7-1: config 0 descriptor?? [ 352.453134][ T34] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 352.463589][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 352.470445][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.634010][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.641088][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.647981][ T34] usb 5-1: Product: syz [ 352.650866][ T34] usb 5-1: Manufacturer: Љ [ 352.654778][ T34] usb 5-1: SerialNumber: syz [ 352.694826][ T3787] usb 7-1: USB disconnect, device number 20 [ 352.934111][ T34] cdc_ncm 5-1:1.0: skipping garbage [ 352.937690][ T34] cdc_ncm 5-1:1.0: skipping garbage [ 352.941334][ T34] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 352.946426][ T34] cdc_ncm 5-1:1.0: bind() failure [ 352.957465][ T34] usb 5-1: USB disconnect, device number 27 05:59:17 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x58343, 0x0) 05:59:17 executing program 2: socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x2e040) 05:59:17 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) [ 353.220794][ T39] audit: type=1400 audit(1656395957.663:259): avc: denied { ioctl } for pid=7163 comm="syz-executor.1" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 05:59:17 executing program 3: mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) syz_clone(0x50980500, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)) getpid() 05:59:17 executing program 1: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 05:59:17 executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 05:59:17 executing program 2: syz_open_procfs$userns(0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x121080, 0x0) 05:59:17 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 05:59:17 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 05:59:17 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000082505a1a44000010203010902"], 0x0) 05:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) [ 353.451395][ T39] audit: type=1400 audit(1656395957.893:260): avc: denied { write } for pid=7178 comm="syz-executor.2" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 05:59:17 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0xd1, 0x0) 05:59:17 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@dev, @remote}, &(0x7f0000000280)=0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x111) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) 05:59:17 executing program 1: getresgid(&(0x7f0000000100), &(0x7f0000000140), 0x0) 05:59:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) 05:59:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:18 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 353.750684][ C2] vkms_vblank_simulate: vblank timer overrun [ 353.753237][ T34] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 354.003199][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 354.153091][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 354.213164][ T34] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 354.218173][ T34] usb 5-1: can't read configurations, error -71 05:59:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) 05:59:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 05:59:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:19 executing program 0: ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) 05:59:19 executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 05:59:19 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 05:59:19 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20) 05:59:19 executing program 3: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090218010201fb401f0904000001020d00000724060001ac5305240006000d240f01b6680000010070080506241a010000ba24131af2e223b56a0a1c36ec0a0c3d871b0f0a04a19c2c3a146ac438b895113c4572899d27902f803ddaafb64c6d6c03f4c319cbaa4eca6b000bc0dd1e20f4dd3d830e022f0c"], &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x100, 0x1f, 0x4, 0x3f, 0x40, 0x80}, 0x5, 0x0, 0x1, [{0x2, &(0x7f0000000340)=@string={0x2}}]}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 05:59:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe670000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 354.710229][ T39] audit: type=1400 audit(1656395959.153:261): avc: denied { connect } for pid=7220 comm="syz-executor.2" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.728269][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 05:59:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) [ 354.755816][ T7223] device bond1 entered promiscuous mode [ 354.768072][ T7223] bond1 (unregistering): Released all slaves [ 354.953055][ T3787] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 355.202968][ T3787] usb 8-1: Using ep0 maxpacket: 8 05:59:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:19 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 05:59:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) [ 355.422983][ T3787] usb 8-1: unable to get BOS descriptor or descriptor too short [ 355.513220][ T3787] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.520832][ T3787] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 355.527846][ T3787] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.615906][ C2] vkms_vblank_simulate: vblank timer overrun [ 355.657243][ T3787] usb 8-1: language id specifier not provided by device, defaulting to English [ 355.863512][ T3787] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.870323][ T3787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.876938][ T3787] usb 8-1: Product: syz [ 355.880154][ T3787] usb 8-1: Manufacturer: syz [ 355.884515][ T3787] usb 8-1: SerialNumber: syz [ 356.199883][ T3787] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 356.204485][ T3787] cdc_ncm 8-1:1.0: bind() failure [ 356.213461][ T3787] usb 8-1: USB disconnect, device number 21 05:59:21 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) 05:59:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:21 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x9, 0x4}) 05:59:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:21 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x9, 0x4}) 05:59:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x7000}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:21 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x24300, 0x0) 05:59:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:21 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x8045, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 05:59:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}}, 0x0) 05:59:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:22 executing program 3: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) 05:59:22 executing program 0: getgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0x0]) 05:59:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x1}) 05:59:22 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x0) 05:59:22 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:22 executing program 0: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) 05:59:22 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff0103000009"], 0x0) 05:59:22 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:22 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001c80)=@raw=[@exit], &(0x7f0000001d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:59:22 executing program 0: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) 05:59:22 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) [ 358.143177][ T3758] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 358.405527][ T3758] usb 8-1: Using ep0 maxpacket: 8 05:59:22 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}}, 0x0) [ 358.543236][ T3758] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.623272][ T3758] usb 8-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 358.629260][ T3758] usb 8-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 358.635273][ T3758] usb 8-1: Manufacturer: syz [ 358.645033][ T3758] usb 8-1: config 0 descriptor?? [ 358.933319][ T3758] usb 8-1: Found UVC 0.00 device (0bd3:0d55) [ 358.938761][ T3758] usb 8-1: Failed to initialize entity for entity 255 [ 358.943815][ T3758] usb 8-1: Failed to register entities (-22). [ 358.952352][ T3758] usb 8-1: USB disconnect, device number 22 05:59:23 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) 05:59:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:23 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 05:59:23 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:23 executing program 0: msgsnd(0x0, &(0x7f0000000100)=ANY=[], 0xd1, 0x0) 05:59:23 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) 05:59:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 05:59:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:23 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 05:59:24 executing program 0: msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0xd1, 0x0) 05:59:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:24 executing program 3: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680), 0xc, 0x0, 0x1, 0x0, 0x0, 0x28801}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r2, 0x300, 0x0, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x56}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000900), 0xc, 0x0}, 0x0) 05:59:24 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:59:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_ACT={0x78, 0x3, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x48, 0xe, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xac}}, 0x0) 05:59:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) [ 359.908852][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:59:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) 05:59:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 05:59:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 360.153138][ T3758] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 360.443030][ T3758] usb 5-1: Using ep0 maxpacket: 8 [ 360.563320][ T3758] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.643327][ T3758] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 360.649111][ T3758] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 360.655309][ T3758] usb 5-1: Manufacturer: syz [ 360.661620][ T3758] usb 5-1: config 0 descriptor?? [ 360.933105][ T3758] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 360.937679][ T3758] usb 5-1: Failed to initialize entity for entity 255 [ 360.941938][ T3758] usb 5-1: Failed to register entities (-22). [ 360.948525][ T3758] usb 5-1: USB disconnect, device number 30 05:59:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:25 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x200a80, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 05:59:25 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r0, 0x0) 05:59:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:25 executing program 3: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090218010201fb401f0904000001020d00000724060001ac5305240006000d240f01b6680000010070080506241a010000ba24131af2e223b56a0a1c36ec0a0c3d871b0f0a04a19c2c3a146ac438b895113c4572899d27902f803ddaafb64c6d6c03f4c319cbaa4eca6b000bc0dd1e20"], &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x2, &(0x7f0000000340)=@string={0x2}}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 05:59:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:25 executing program 0: ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x121080, 0x0) [ 361.455866][ T39] audit: type=1400 audit(1656395965.903:262): avc: denied { map } for pid=7390 comm="syz-executor.0" path="socket:[46154]" dev="sockfs" ino=46154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 05:59:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:25 executing program 0: syz_clone3(&(0x7f0000000a40)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) [ 361.475352][ T39] audit: type=1400 audit(1656395965.903:263): avc: denied { read } for pid=7390 comm="syz-executor.0" path="socket:[46154]" dev="sockfs" ino=46154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 05:59:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:26 executing program 0: syz_clone3(&(0x7f0000000a40)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) accept$unix(0xffffffffffffffff, 0x0, 0x0) [ 361.733675][ T3758] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 361.993057][ T3758] usb 8-1: Using ep0 maxpacket: 8 [ 362.163465][ T3758] usb 8-1: unable to get BOS descriptor or descriptor too short [ 362.273440][ T3758] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.279971][ T3758] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.286262][ T3758] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.333295][ T3758] usb 8-1: language id specifier not provided by device, defaulting to English [ 362.474935][ T3758] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.480966][ T3758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.486953][ T3758] usb 8-1: Product: syz [ 362.489643][ T3758] usb 8-1: Manufacturer: syz [ 362.492593][ T3758] usb 8-1: SerialNumber: syz [ 362.774280][ T3758] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 362.778791][ T3758] cdc_ncm 8-1:1.0: bind() failure [ 362.785093][ T3758] usb 8-1: USB disconnect, device number 23 05:59:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r0, 0x1, 0x12, &(0x7f0000000000)={0x1000000}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_bridge\x00', {0x3}}) 05:59:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:27 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0xc0800) 05:59:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:27 executing program 0: socketpair(0x11, 0xa, 0x1, &(0x7f0000000280)) 05:59:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:27 executing program 3: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)="5f33e4c69386f372cb98d4421baa7e9c8266e23f115ad080b6dbfa99b311f18eba001855b4d8de907353df7f6b61473482cd45382cbe0618f53db61fa9ae21f23ddf62e3312463360a7aefc2aed38386aa8e3620c4c0858e7c0b9e4d2ee0abe86214ae6f1c6159fbd8b0ee78b3de68bbcd9532d5a851283e9840bf1d8001009bebd2bdc9f27f03328f454aa0d725cfb230a26d323974d2e264e217fa38366f2e63b994d647f69a7d3041b32d035edbec93c6033d604377f5d6265860c859498150c3feac0e12899beeeb348296") 05:59:27 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000300)='$', 0x1}], 0x1) 05:59:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:27 executing program 3: mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 363.333586][ T39] audit: type=1400 audit(1656395967.773:264): avc: denied { read write } for pid=7433 comm="syz-executor.0" name="nullb0" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 05:59:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x480, 0x0) sendfile(r1, r0, &(0x7f0000000400), 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000a80)=[@text16={0x10, &(0x7f0000000a40)="baf80c66b840be848a66efbafc0c66b81700000066eff40f01c2f30f090fc736d3a62e640f019af300660f388091e5e2f20f11ac575cea0f00c3000f09", 0x3d}], 0x1, 0x20, &(0x7f0000000ac0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x80, &(0x7f0000000b80), 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{}, {0x0, 0x0, 0x0, 0x0, 0xfd}]}) [ 363.353560][ T39] audit: type=1400 audit(1656395967.793:265): avc: denied { open } for pid=7433 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 363.376269][ T39] audit: type=1400 audit(1656395967.803:266): avc: denied { map } for pid=7433 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 363.430238][ T7440] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 363.438141][ T7440] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:28 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000300)='$', 0x1}], 0x1) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 05:59:28 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000980), 0x46180, 0x0) 05:59:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:28 executing program 0: socketpair(0x28, 0x0, 0x72, &(0x7f00000002c0)) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 05:59:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x480, 0x0) sendfile(r1, r0, &(0x7f0000000400), 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000a80)=[@text16={0x10, &(0x7f0000000a40)="baf80c66b840be848a66efbafc0c66b81700000066eff40f01c2f30f090fc736d3a62e640f019af300660f388091e5e2f20f11ac575cea0f00c3000f09", 0x3d}], 0x1, 0x20, &(0x7f0000000ac0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x80, &(0x7f0000000b80), 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{}, {0x0, 0x0, 0x0, 0x0, 0xfd}]}) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 05:59:28 executing program 0: syz_usb_connect$cdc_ncm(0x5, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090218010201fb401f0904000001"], &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) [ 364.138046][ T7474] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 364.147148][ T7474] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 364.393063][ T29] usb 5-1: new high-speed USB device number 31 using dummy_hcd 05:59:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) [ 364.633157][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 364.793352][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 364.883162][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.889974][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.897120][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 05:59:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:29 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 05:59:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x480, 0x0) sendfile(r1, r0, &(0x7f0000000400), 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000a80)=[@text16={0x10, &(0x7f0000000a40)="baf80c66b840be848a66efbafc0c66b81700000066eff40f01c2f30f090fc736d3a62e640f019af300660f388091e5e2f20f11ac575cea0f00c3000f09", 0x3d}], 0x1, 0x20, &(0x7f0000000ac0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x80, &(0x7f0000000b80), 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{}, {0x0, 0x0, 0x0, 0x0, 0xfd}]}) 05:59:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x40008008}) [ 365.063146][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.069263][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.074939][ T29] usb 5-1: Product: syz [ 365.077619][ T29] usb 5-1: Manufacturer: syz [ 365.080583][ T29] usb 5-1: SerialNumber: syz [ 365.355653][ T29] usb 5-1: USB disconnect, device number 31 05:59:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x480, 0x0) sendfile(r1, r0, &(0x7f0000000400), 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000a80)=[@text16={0x10, &(0x7f0000000a40)="baf80c66b840be848a66efbafc0c66b81700000066eff40f01c2f30f090fc736d3a62e640f019af300660f388091e5e2f20f11ac575cea0f00c3000f09", 0x3d}], 0x1, 0x20, &(0x7f0000000ac0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x80, &(0x7f0000000b80), 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{}, {0x0, 0x0, 0x0, 0x0, 0xfd}]}) 05:59:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:59:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:59:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:59:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:32 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x100, 0x0, 0x4, 0x3f, 0x40, 0x80}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, [{0x0, 0x0}]}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, 0x0) pidfd_getfd(0xffffffffffffffff, r4, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r5 = eventfd(0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) 05:59:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x40008008}) 05:59:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.133084][ T173] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 368.383009][ T173] usb 5-1: Using ep0 maxpacket: 8 05:59:32 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 05:59:32 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x11, r0, 0x0) 05:59:32 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:59:32 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:59:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) [ 368.512541][ T39] audit: type=1400 audit(1656395972.953:267): avc: denied { write accept } for pid=7623 comm="syz-executor.3" path="socket:[48828]" dev="sockfs" ino=48828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 368.593396][ T173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.673255][ T173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.680500][ T173] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.687524][ T173] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.933122][ T173] usb 5-1: string descriptor 0 read error: -22 [ 368.937329][ T173] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.944697][ T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.995066][ T173] cdc_ncm 5-1:1.0: skipping garbage [ 368.999058][ T173] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 369.004285][ T173] cdc_ncm 5-1:1.0: bind() failure [ 369.198393][ T173] usb 5-1: USB disconnect, device number 32 05:59:34 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:59:34 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 05:59:34 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 05:59:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() syz_open_procfs(0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:34 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:34 executing program 3: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) 05:59:34 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback}, 0x20) 05:59:34 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:34 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) 05:59:34 executing program 0: syz_clone3(&(0x7f0000000200)={0x42200000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x1b}, 0x0, 0x0, &(0x7f0000000100)=""/159, 0x0}, 0x58) 05:59:34 executing program 3: mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:59:34 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:34 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 05:59:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() syz_open_procfs(0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000d40)={'vcan0\x00'}) 05:59:35 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/142, 0x8e}], 0x1}}], 0x1, 0x0, 0x0) 05:59:35 executing program 3: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) 05:59:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:35 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x0, 0x4}) 05:59:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:35 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) 05:59:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:35 executing program 3: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/253) 05:59:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:35 executing program 0: syz_open_dev$dri(&(0x7f00000002c0), 0x3, 0x119043) 05:59:35 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000280), 0x4) 05:59:35 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) 05:59:35 executing program 3: msgsnd(0x0, 0x0, 0xd1, 0x0) 05:59:36 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x121080, 0x0) 05:59:36 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:36 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 05:59:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() syz_open_procfs(0x0, 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:59:36 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 05:59:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:36 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000440)) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r0, 0x0) 05:59:36 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) getpid() getuid() 05:59:37 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x100, 0x0) write$khugepaged_scan(r1, &(0x7f00000000c0), 0x8) write$tun(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x9300}, @void, @llc={@llc={0xdc, 0xfc, 'K'}}}, 0x7) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) inotify_init() sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 05:59:37 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x400200, 0x0) 05:59:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x40005) 05:59:37 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @private1, @mcast2, 0x0, 0xe4}) 05:59:37 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2, 0x0, 0x0, 0xee00, 0xee00}}) 05:59:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x0, 0x0, 0x0, 0x0, 0x506, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 05:59:37 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000040)) 05:59:37 executing program 0: socketpair(0x1e, 0x0, 0xffffffff, &(0x7f0000000040)) 05:59:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 05:59:38 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000001d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:59:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x0) 05:59:38 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001c00)={0x0}, 0x20) 05:59:38 executing program 0: syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x2e040) 05:59:38 executing program 3: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 05:59:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x480, 0x0) sendfile(r1, r0, &(0x7f0000000400), 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0xb, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000a80)=[@text16={0x10, &(0x7f0000000a40)="baf80c66b840be848a66efbafc0c66b81700000066eff40f01c2f30f090fc736d3a62e640f019af300660f388091e5e2f20f11ac575cea0f00c3000f09", 0x3d}], 0x1, 0x20, &(0x7f0000000ac0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b40)=[@text32={0x20, &(0x7f0000000ac0)="0f209d66baf80cb8a0f64c88ef66bafc0cb82a636838ef66ba2000b059ee0f01ca9a660000004f00c4e135ddf6f30f09b9f40200000f322e0f01780026f3024200", 0x41}], 0x1, 0x80, &(0x7f0000000b80), 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{}, {0x0, 0x0, 0x0, 0x0, 0xfd}]}) 05:59:38 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0xffffffffffffffff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 05:59:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00000000000000}}, 0x1c) 05:59:38 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0004000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) splice(r3, 0x0, r2, 0x0, 0x4000000000008ec0, 0x0) 05:59:38 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 05:59:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x42, 0x0, 0x7) 05:59:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000440)) 05:59:38 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) 05:59:39 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090218"], &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0}) 05:59:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 05:59:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', @ifru_map}) [ 375.100617][ T39] audit: type=1400 audit(1656395979.543:268): avc: denied { ioctl } for pid=7831 comm="syz-executor.3" path="socket:[46801]" dev="sockfs" ino=46801 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 05:59:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', @ifru_map}) 05:59:39 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 05:59:39 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) [ 375.352977][ T173] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 375.615808][ T173] usb 5-1: Using ep0 maxpacket: 8 [ 375.783180][ T173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.863067][ T173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.870453][ T173] usb 5-1: config 0 has no interfaces? [ 376.033140][ T173] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.039431][ T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.045823][ T173] usb 5-1: Product: syz [ 376.048517][ T173] usb 5-1: Manufacturer: syz [ 376.051367][ T173] usb 5-1: SerialNumber: syz [ 376.056136][ T173] usb 5-1: config 0 descriptor?? [ 376.298459][ T3758] usb 5-1: USB disconnect, device number 33 05:59:41 executing program 0: socketpair(0x3, 0x0, 0x800, &(0x7f0000000040)) 05:59:41 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, &(0x7f0000000080)) 05:59:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x0, 0x0, 0x3}, 0x20) [ 376.826978][ T39] audit: type=1400 audit(1656395981.273:269): avc: denied { create } for pid=7846 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 05:59:41 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000082505a1a44000010203010902"], &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0}) 05:59:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x0, 0x0, 0x3}, 0x20) 05:59:41 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x2e040) 05:59:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x2}, 0x20) 05:59:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 377.152934][ T47] usb 8-1: new high-speed USB device number 24 using dummy_hcd 05:59:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 377.422926][ T47] usb 8-1: Using ep0 maxpacket: 8 05:59:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:41 executing program 0: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000080)) socketpair(0x28, 0x0, 0x72, &(0x7f00000002c0)) [ 377.603053][ T47] usb 8-1: unable to get BOS descriptor or descriptor too short [ 377.703047][ T47] usb 8-1: config 0 has no interfaces? [ 377.873227][ T47] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.878985][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.887290][ T47] usb 8-1: Product: syz [ 377.892370][ T47] usb 8-1: Manufacturer: syz [ 377.897234][ T47] usb 8-1: SerialNumber: syz [ 377.911452][ T47] usb 8-1: config 0 descriptor?? [ 378.166678][ T173] usb 8-1: USB disconnect, device number 24 05:59:43 executing program 0: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 05:59:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:43 executing program 3: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x2e040) 05:59:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:43 executing program 0: socketpair(0x15, 0x0, 0x0, &(0x7f00000001c0)) 05:59:43 executing program 3: syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) [ 378.726353][ T39] audit: type=1400 audit(1656395983.173:270): avc: denied { create } for pid=7895 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 05:59:43 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x80000000) 05:59:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x0, 0x0, 0x0, 0x0, 0x506}, 0x48) 05:59:43 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0) 05:59:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 379.296214][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.301456][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 05:59:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r2) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:43 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 05:59:43 executing program 0: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)) 05:59:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 379.536747][ T39] audit: type=1400 audit(1656395983.983:271): avc: denied { ioctl } for pid=7925 comm="syz-executor.0" path="/dev/dri/renderD128" dev="devtmpfs" ino=631 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 05:59:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:44 executing program 0: select(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x200400}, 0x0, &(0x7f0000000100)) 05:59:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r2) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r2) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) 05:59:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 386.517224][ T8168] kvm: emulating exchange as write 05:59:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000240), 0x0) 05:59:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:59:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:59:53 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:59:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:59:53 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:53 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:59:54 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="440f231f650f00d10f35c481e9766c19fe66460f1eedf245ab66baf80cb86872d18cef66bafc0cb800609375ef44d8e166410f3831646d00c4e24db78b02000000", 0x88}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:59:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') 05:59:54 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x12a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090218010201fb401f0904000001020d00000724060001ac5305240006000d240f01b6680000010070080506241a010000ba24131af2e223b56a0a1c36ec0a0c3d871b0f0a04a19c2c3a146ac438b895113c4572899d27902f803ddaafb64c6d6c03f4c319cbaa4eca6b000bc0dd1e20f4dd3d830e022f0cb2b830298d4951d831bdff0171cb3eb0245941eb2b00c27039445bc00f1a7014d0821a17386e8ec9e18ac0e63b3cae53e5d1fac8cafa505ec9ec84a3b47da82596e73b17e7a559145a7665df41b549ff3258092e5777924a0036d562964b312f59c4ac9109058103000401fc060904010000020d00000904010102020d000009058202ff0301ee060905"], &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x0, 0x4, 0x3f, 0x40, 0x80}, 0x5, &(0x7f0000000300)=ANY=[], 0x1, [{0xaa, &(0x7f0000000340)=@string={0xaa, 0x3, "5e4939f87a3b0db136239bbd76e4421fa4be599e3f68ed5c403e1cfa3997e4818ef2456d91556e1f4f3df21a8728faab2063865806bd640a274e67176d2b4c0f0fe4926c708cfb6f03525608388b87d914766936b5f6af60358a81feceb5fec52dd0739f71c1bd261477818c6cb73c02bc75f04aa24176d4d33308a7f2d20f7d10e1a5b5435b421071c2c8f2b2c93b6d73c9cf78c5557151830606a98c6c741ec9c1774cb3574d3f"}}]}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000080)="1ce1dc955c9144750dea65e327f6e9d024633ff12c312b22788123f7e1a32c7bd09e3bfe1a2508d1a14befad97e758c06f8f31036b609652d6e56248391ca10c6cf10763a9feb052f908d2acdf6adbc6feed98e7ed0e8caafbd99acebc889f") ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000480), 0x4) 05:59:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 390.452940][ T47] usb 6-1: new high-speed USB device number 20 using dummy_hcd 05:59:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 390.712993][ T47] usb 6-1: Using ep0 maxpacket: 8 05:59:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 390.922950][ T47] usb 6-1: unable to get BOS descriptor or descriptor too short [ 391.003191][ T47] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 391.010318][ T47] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.031822][ T47] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 05:59:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 391.233242][ T47] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.239127][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.244686][ T47] usb 6-1: Product: syz [ 391.247407][ T47] usb 6-1: Manufacturer: syz [ 391.250352][ T47] usb 6-1: SerialNumber: syz 05:59:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') [ 391.564465][ T47] cdc_ncm 6-1:1.0: skipping garbage [ 391.568012][ T47] cdc_ncm 6-1:1.0: skipping garbage [ 391.571281][ T47] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 391.584136][ T47] cdc_ncm 6-1:1.0: bind() failure [ 391.613642][ T47] usb 6-1: USB disconnect, device number 20 05:59:56 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000440)=0x80) 05:59:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:56 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) 05:59:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) 05:59:56 executing program 1: io_uring_setup(0x2c1a, &(0x7f0000000040)={0x0, 0x0, 0x4}) 05:59:56 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003f00), 0xffffffffffffffff) openat$hwrng(0xffffff9c, &(0x7f0000004400), 0x8440, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004480), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) [ 392.126568][ T39] audit: type=1400 audit(1656395996.573:272): avc: denied { append } for pid=8331 comm="syz-executor.1" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 05:59:56 executing program 1: openat$nullb(0xffffff9c, &(0x7f0000000680), 0x0, 0x0) 05:59:56 executing program 1: request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb) 05:59:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:57 executing program 1: request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb) 05:59:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() 05:59:57 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x14, r0, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 05:59:57 executing program 1: io_cancel(0x0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 05:59:57 executing program 1: openat$hwrng(0xffffff9c, &(0x7f0000004400), 0x8440, 0x0) 05:59:57 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x2c1a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x3}) 05:59:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:57 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003f00), 0xffffffffffffffff) openat$hwrng(0xffffff9c, &(0x7f0000004400), 0x8440, 0x0) 05:59:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8990, &(0x7f0000000100)={'batadv_slave_0\x00'}) 05:59:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:59:58 executing program 1: bpf$BPF_GET_PROG_INFO(0xc, 0x0, 0x0) 05:59:58 executing program 1: getpid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 05:59:58 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) 05:59:58 executing program 1: r0 = openat$nullb(0xffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) 05:59:58 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x3, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x6, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "3060de8d"}, {0x5, 0x24, 0x0, 0x5768}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7f, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc1, 0x17, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x20, 0xfe, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x90, 0x5, 0x3, 0xff, 0x2d}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x66, &(0x7f0000000680)=@string={0x66, 0x3, "a3398d739f8c960d560917508c1c232cb5a58fb6758a43a717504f7e1d36736c794a5aaf8dae95951acfdcddfdcce764f8c1ae8ea3fb94e3f83aa826057412828d2c6d019f36bd3861b96ceef8ea883546ff96df6628478273dc71e36da23d921ae0b1a6"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}]}) 05:59:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 394.553369][ T3754] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 394.943253][ T3754] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 394.950665][ T3754] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 394.958205][ T3754] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 394.973973][ T3754] usb 6-1: config 1 interface 0 has no altsetting 0 05:59:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 05:59:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_clone3(0x0, 0x0) [ 395.233228][ T3754] usb 6-1: string descriptor 0 read error: -22 05:59:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 395.238391][ T3754] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.258581][ T3754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.286575][ T8396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.291990][ T8396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.513144][ T3754] cdc_ether: probe of 6-1:1.0 failed with error -71 05:59:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 395.548512][ T3754] usb 6-1: USB disconnect, device number 21 06:00:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:00 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x3, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x6, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "3060de8d"}, {0x5, 0x24, 0x0, 0x5768}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7f, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc1, 0x17, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x20, 0xfe, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x90, 0x5, 0x3, 0xff, 0x2d}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x66, &(0x7f0000000680)=@string={0x66, 0x3, "a3398d739f8c960d560917508c1c232cb5a58fb6758a43a717504f7e1d36736c794a5aaf8dae95951acfdcddfdcce764f8c1ae8ea3fb94e3f83aa826057412828d2c6d019f36bd3861b96ceef8ea883546ff96df6628478273dc71e36da23d921ae0b1a6"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}]}) 06:00:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 06:00:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 396.303123][ T173] usb 6-1: new high-speed USB device number 22 using dummy_hcd 06:00:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 396.693260][ T173] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 396.699559][ T173] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 396.706438][ T173] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 396.719080][ T173] usb 6-1: config 1 interface 0 has no altsetting 0 06:00:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 396.993364][ T173] usb 6-1: string descriptor 0 read error: -22 [ 396.997517][ T173] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.006025][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.033270][ T8439] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 397.038649][ T8439] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 397.263223][ T173] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 397.270856][ T173] usb 6-1: USB disconnect, device number 22 06:00:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000400)=0x4) 06:00:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 06:00:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:02 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffff9c, &(0x7f0000004400), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004480), 0xffffffffffffffff) 06:00:02 executing program 1: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 06:00:02 executing program 1: openat$hwrng(0xffffff9c, &(0x7f0000004400), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004480), 0xffffffffffffffff) 06:00:02 executing program 1: socket(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/block/loop0', 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/class/input', 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002d80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002840)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 06:00:02 executing program 1: socket(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/block/loop0', 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/class/input', 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002d80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002840)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 397.886092][ T39] audit: type=1400 audit(1656396002.333:273): avc: denied { create } for pid=8490 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 06:00:02 executing program 1: openat$hwrng(0xffffff9c, &(0x7f0000004400), 0x0, 0x0) 06:00:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r3) 06:00:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:02 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x7) 06:00:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8000000012001000000000002336aca02bbd7000ffdbdf2507000001ae443c66b1cd688f32af5698606feff15198ff438f632322e74cec0c9434b145dac799f30b20cd0b7e276fe622f2a7b0eb1a62ed6ccada6d2a41fd7e367567cc1ca7c563bd", @ANYRES32=0x0, @ANYBLOB="0805000002420000090024008a6104180f000000080023000000000044001a80040007003c000a8014000700fc020000000000000000000000000000050008008100000014000700fc020000000000000000000000000001050008000700000005002700e9000000"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000300), 0x0, 0x2) r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc04c5609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "262e21e8"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x11}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10}}]}}]}, 0x48}}, 0x0) 06:00:02 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaab90aa86dd601bfc97004d8880fe800001000000000000000000000600ff02000000000000000000000000000101004e20004590"], 0x0) recvfrom$inet6(r0, 0x0, 0x45, 0x2, 0x0, 0x0) [ 398.556044][ T39] audit: type=1400 audit(1656396003.003:274): avc: denied { bind } for pid=8514 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.571573][ T39] audit: type=1400 audit(1656396003.003:275): avc: denied { name_bind } for pid=8514 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 398.585636][ T39] audit: type=1400 audit(1656396003.003:276): avc: denied { node_bind } for pid=8514 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 06:00:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) 06:00:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:03 executing program 1: io_uring_setup(0x0, &(0x7f0000000040)) 06:00:03 executing program 1: io_setup(0x5, &(0x7f00000001c0)=0x0) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r0, 0x0, 0x0) 06:00:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r3], 0x34}}, 0x0) [ 399.632436][ T8556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:00:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) 06:00:04 executing program 1: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) 06:00:04 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000001500), 0xffffffffffffffff) 06:00:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000300), 0x0, 0x2) r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc04c5609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "262e21e8"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r2}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0xec4, 0x64, 0xd27, 0x0, 0x0, {0x11}, [@filter_kind_options=@f_matchall={{0xd}, {0xe90, 0x2, [@TCA_MATCHALL_ACT={0xe8c, 0x2, [@m_connmark={0xe88, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0xe55, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 06:00:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100), 0x4) 06:00:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:04 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000004480), 0xffffffffffffffff) 06:00:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) gettid() process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:04 executing program 1: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8983, 0x0) 06:00:04 executing program 1: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) 06:00:04 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x6, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "3060de8d"}, {0x5, 0x24, 0x0, 0x5768}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7f, 0x0, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc1, 0x17, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x20, 0xfe, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x90, 0x5, 0x3}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) [ 400.573073][ T34] usb 6-1: new high-speed USB device number 23 using dummy_hcd 06:00:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 06:00:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) [ 400.979455][ T34] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 400.986055][ T34] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 400.991977][ T34] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 401.000130][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 06:00:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 401.253046][ T34] usb 6-1: string descriptor 0 read error: -22 [ 401.257368][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.263513][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.284538][ T8596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 401.289508][ T8596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 06:00:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) [ 401.523393][ T34] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 401.533632][ T34] usb 6-1: USB disconnect, device number 23 06:00:06 executing program 1: getegid() syz_clone(0x1001000, &(0x7f0000000d80), 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000e80)='r') 06:00:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 06:00:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:06 executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vivid(&(0x7f00000013c0), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc04c5609, &(0x7f0000000100)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "262e21e8"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r0}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) 06:00:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 06:00:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 06:00:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:07 executing program 1: r0 = syz_open_dev$vivid(&(0x7f00000013c0), 0x0, 0x2) r1 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f0000000100)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "262e21e8"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r1}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 06:00:07 executing program 1: openat$nullb(0xffffff9c, 0x0, 0x20000, 0x0) 06:00:07 executing program 1: r0 = syz_open_dev$vivid(&(0x7f00000013c0), 0x0, 0x2) r1 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f0000000100)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "262e21e8"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000010004b0400000000000000007afd7392", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b0001006272696467650000340002800500160005"], 0x64}}, 0x0) [ 402.945725][ T8688] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:00:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 06:00:07 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000004100)) 06:00:07 executing program 1: syz_clone3(&(0x7f0000000200)={0x42200000, 0x0, &(0x7f0000000040), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 06:00:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:07 executing program 1: syz_clone3(&(0x7f0000000200)={0x42200000, 0x0, &(0x7f0000000040), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 06:00:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:07 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000003f00), 0xffffffffffffffff) openat$hwrng(0xffffff9c, &(0x7f0000004400), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004480), 0xffffffffffffffff) 06:00:07 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 06:00:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 06:00:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000080)) 06:00:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x7}}}}, 0x20}}, 0x0) [ 403.485729][ T8725] netlink: 'syz-executor.1': attribute type 153 has an invalid length. 06:00:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:08 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f00000043c0), 0xffffffffffffffff) 06:00:08 executing program 1: openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:00:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{0x0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) 06:00:08 executing program 1: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) 06:00:08 executing program 1: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f0000003f00), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000004240)={&(0x7f0000004140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 06:00:08 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 06:00:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:00:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:09 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 1: socketpair(0x0, 0x80000, 0x0, &(0x7f0000004100)) 06:00:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000001180)={0xa, 0x4e20}, 0x2b) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 405.081524][ T39] audit: type=1400 audit(1656396009.523:277): avc: denied { bind } for pid=8781 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 06:00:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 405.095527][ T39] audit: type=1400 audit(1656396009.523:278): avc: denied { name_bind } for pid=8781 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 405.109214][ T39] audit: type=1400 audit(1656396009.523:279): avc: denied { node_bind } for pid=8781 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 405.125816][ T39] audit: type=1400 audit(1656396009.523:280): avc: denied { name_connect } for pid=8781 comm="syz-executor.1" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 06:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000001180)={0xa, 0x4e20}, 0x2b) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 06:00:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:09 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) 06:00:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x80}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076"], 0x48}}, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000300), 0x0, 0x2) r4 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc04c5609, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "262e21e8"}, 0x0, 0x4, {}, 0x0, 0xf6f36000, r4}) 06:00:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 405.662955][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:00:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:10 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/block/loop0', 0x4000, 0x0) 06:00:10 executing program 1: io_uring_setup(0x2c1a, &(0x7f0000000040)) 06:00:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) 06:00:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 06:00:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:10 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:10 executing program 1: io_uring_setup(0x2c1a, &(0x7f0000000040)={0x0, 0xb0a4, 0x4, 0x3}) 06:00:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:10 executing program 1: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 06:00:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000003f00), 0xffffffffffffffff) 06:00:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) 06:00:10 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x0, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001d00)='/sys/block/loop0', 0x80000, 0x140) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x24, r0, 0x400, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xdf0e760db33ecaff) 06:00:10 executing program 1: io_uring_setup(0x2c1a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0xc5}) 06:00:11 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:11 executing program 1: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x40040) 06:00:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) 06:00:11 executing program 1: getpid() syz_clone3(&(0x7f0000000200)={0x42200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:00:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000200)=""/254, 0x26, 0xfe, 0x1}, 0x20) 06:00:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000200)=""/254, 0x26, 0xfe, 0x1}, 0x20) 06:00:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000200)=""/254, 0x26, 0xfe, 0x1}, 0x20) 06:00:11 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000200)=""/254, 0x26, 0xfe, 0x1}, 0x20) 06:00:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) 06:00:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) unshare(0x28000400) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback}, 0x1c) unshare(0x0) getpeername$inet6(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x101, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xffff}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) unshare(0x4000100) unshare(0x40000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x800, 0x0, @loopback, 0x2}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400098f8e108c0a3eb3e001714c1c211b1b110354c487df1acf77560af9a835c2cd71ee408f9bc8e02d681bb30f33abd712ecf2d35eae267f6fd1508b984231b8a90c2a559010000805d12504d075a60c6b9652a14", @ANYBLOB, @ANYBLOB="88a2fd07b21b96c17a84a639ab1d066652c2b71aa554383aa719cc095d2252ae027579b9bdc9440cb47a87310323244d3605cb359605808c9060ba03c19bc47cf42015ce094787d62017558b384d9c8a2b8063a83ca5eb98196b6bf3eb15be8144e863891f7bf83346d261aef15f20dafc309774d941b66cb6d88bac4cd28eb0afc0618797ceda5dc123833e11384c4b5a27c8d52bb83617c2515f3224e9f8967a827564dac4061b9b744e1d89c1b7b138408f2f00375b13"], 0x40}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) sendmsg$nl_route_sched(r2, 0x0, 0x20000800) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @mcast1, 0x3ff}, 0x1c) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 06:00:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8901, 0x0) 06:00:11 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x0, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x40, 0x3}, {0xaaaa, 0xd3}, {}]}) 06:00:12 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaab90aa86dd601bfc97004d8880fe800001000000000000000000000600ff02000000000000000000000000000101004e20004590"], 0x0) 06:00:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:12 executing program 1: add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="ef", 0x1, 0xfffffffffffffffe) 06:00:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) 06:00:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 407.834102][ T39] audit: type=1400 audit(1656396012.283:281): avc: denied { read } for pid=8915 comm="syz-executor.1" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 06:00:12 executing program 1: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x314, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0xee, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x2, 0x8}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x3, 0x55}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0xc6, 0x9, 0x4, 0xf7, 0xb9}, 0x89, &(0x7f0000000080)={0x5, 0xf, 0x89, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "81b52eee5ec6694eb8314b296f8d7dc1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x81, 0x1f, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "729cb7522eb44518031c56496aba12f0"}, @generic={0x48, 0x10, 0x3, "76d1cf1f8818befbe580c3ac051f459576e34fc9e3aed476c42e0b9f86fb6f5f9237486bdd97d78594c6b54cc6af4c784a1100fa3f21b3574aa32a098897ad73c25a6e654b"}]}, 0x1, [{0x0, 0x0}]}) [ 407.850816][ T39] audit: type=1400 audit(1656396012.283:282): avc: denied { open } for pid=8915 comm="syz-executor.1" path="net:[4026532887]" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 407.880490][ T39] audit: type=1400 audit(1656396012.283:283): avc: denied { create } for pid=8915 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.907103][ T39] audit: type=1400 audit(1656396012.283:284): avc: denied { bind } for pid=8915 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.933247][ T39] audit: type=1400 audit(1656396012.283:285): avc: denied { setopt } for pid=8915 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 408.163006][ T47] usb 6-1: new high-speed USB device number 24 using dummy_hcd 06:00:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) [ 408.432924][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 408.583115][ T47] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 06:00:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:13 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x200000) syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x40) [ 408.873506][ T47] usb 6-1: string descriptor 0 read error: -22 [ 408.879819][ T47] usb 6-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.40 [ 408.887168][ T39] audit: type=1400 audit(1656396013.333:286): avc: denied { read } for pid=3122 comm="acpid" name="event5" dev="devtmpfs" ino=2685 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 06:00:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1) [ 408.908887][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.984574][ T47] usbhid 6-1:1.0: can't add hid device: -22 [ 408.994950][ T47] usbhid: probe of 6-1:1.0 failed with error -22 [ 409.165034][ T47] usb 6-1: USB disconnect, device number 24 06:00:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) 06:00:14 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000640)) 06:00:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) 06:00:14 executing program 2: add_key$user(&(0x7f0000000480), 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x314, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0xee, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x424}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x3, 0x55}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x9, 0x0, 0xf7, 0xb9}, 0x44, &(0x7f0000000080)={0x5, 0xf, 0x44, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "81b52eee5ec6694eb8314b296f8d7dc1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x81, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "729cb7522eb44518031c56496aba12f0"}, @generic={0x3, 0x10, 0x3}]}}) 06:00:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) 06:00:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) 06:00:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) 06:00:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) [ 410.002958][ T3755] usb 7-1: new high-speed USB device number 21 using dummy_hcd 06:00:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) [ 410.243014][ T3755] usb 7-1: Using ep0 maxpacket: 8 [ 410.643082][ T3755] usb 7-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.40 [ 410.648729][ T3755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.654358][ T3755] usb 7-1: Product: syz [ 410.656967][ T3755] usb 7-1: Manufacturer: syz [ 410.659826][ T3755] usb 7-1: SerialNumber: syz [ 411.073145][ T3755] usbhid 7-1:1.0: can't add hid device: -71 [ 411.077635][ T3755] usbhid: probe of 7-1:1.0 failed with error -71 [ 411.083576][ T3755] usb 7-1: USB disconnect, device number 21 06:00:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x314, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @string={0x4, 0x3, '&q'}}, 0x0, 0x0}, 0x0) 06:00:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) 06:00:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 06:00:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x10001}, 0x8) shutdown(r0, 0x1) [ 411.467054][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 411.467072][ T39] audit: type=1400 audit(1656396015.913:292): avc: denied { connect } for pid=8992 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.520433][ T39] audit: type=1400 audit(1656396015.963:293): avc: denied { shutdown } for pid=8992 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.713032][ T15] usb 7-1: new high-speed USB device number 22 using dummy_hcd 06:00:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 411.963286][ T15] usb 7-1: Using ep0 maxpacket: 8 06:00:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 412.093441][ T15] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 06:00:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 412.263810][ T15] usb 7-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.40 [ 412.271800][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.279991][ T15] usb 7-1: Product: syz [ 412.283356][ T15] usb 7-1: Manufacturer: syz [ 412.286712][ T15] usb 7-1: SerialNumber: syz [ 412.554845][ T15] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 412.756932][ T47] usb 7-1: USB disconnect, device number 22 06:00:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x10001}, 0x8) shutdown(r0, 0x1) 06:00:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x10001}, 0x8) shutdown(r0, 0x1) 06:00:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 06:00:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 413.535302][ T173] Bluetooth: hci3: command 0x0405 tx timeout 06:00:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 06:00:18 executing program 3: add_key$user(&(0x7f0000000480), 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x314, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x424}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x8}}]}}}]}}]}}, 0x0) 06:00:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x10001}, 0x8) shutdown(r0, 0x1) 06:00:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x10001}, 0x8) shutdown(r0, 0x1) [ 414.303150][ T3761] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 414.553079][ T3761] usb 8-1: Using ep0 maxpacket: 8 06:00:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 414.683130][ T3761] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.691703][ T3761] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.700747][ T3761] usb 8-1: config 1 interface 0 has no altsetting 0 06:00:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 414.903142][ T3761] usb 8-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.40 [ 414.909230][ T3761] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.914533][ T3761] usb 8-1: Product: syz [ 414.917302][ T3761] usb 8-1: Manufacturer: syz [ 414.920213][ T3761] usb 8-1: SerialNumber: syz 06:00:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x10001}, 0x8) shutdown(r0, 0x1) [ 415.383233][ T3761] usbhid 8-1:1.0: can't add hid device: -71 [ 415.388349][ T3761] usbhid: probe of 8-1:1.0 failed with error -71 [ 415.396403][ T3761] usb 8-1: USB disconnect, device number 25 06:00:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x10001}, 0x8) shutdown(r0, 0x1) 06:00:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1012, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:00:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) [ 415.768412][ T39] audit: type=1400 audit(1656396020.213:294): avc: denied { map } for pid=9067 comm="syz-executor.3" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 06:00:20 executing program 1: semtimedop(0x0, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140)) 06:00:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) 06:00:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 06:00:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/130, 0x82}], 0x2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 06:00:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:21 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/164) 06:00:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1012, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:00:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) sendmsg$nl_route(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001600)=@bridge_getneigh={0x24, 0x1e, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_PHYS_PORT_ID={0x4}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) 06:00:21 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) 06:00:21 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/73, 0x49}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(0x0) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x50, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) 06:00:21 executing program 1: add_key$user(&(0x7f0000000480), 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x314, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0xee, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x424}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x55}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0xba, &(0x7f0000000080)={0x5, 0xf, 0xba, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1f, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x81, 0x0, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "729cb7522eb44518031c56496aba12f0"}, @generic={0x8d, 0x10, 0x3, "76d1cf1f8818befbe580c3ac051f459576e34fc9e3aed476c42e0b9f86fb6f5f9237486bdd97d78594c6b54cc6af4c784a1100fa3f21b3574aa32a098897ad73c25a6e654b8b76c36fc6aeebfd9d7baa587f2208b12afb2d5dd59eca64d8e46db5abceaa10b85e6751787bb6f6a5cc949e803496908977f861120506c49916925eda79b5eb1da225de2f"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1007}}]}) 06:00:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x2324, &(0x7f0000000980)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x7, 0xd5, &(0x7f0000000440)=""/213, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:00:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000013c0)={0x8}) 06:00:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1012, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:00:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x5, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000013c0)) 06:00:21 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0xffffffffffffffff) 06:00:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) [ 416.912982][ T3758] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 417.173013][ T3758] usb 6-1: Using ep0 maxpacket: 8 [ 417.373149][ T3758] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.533167][ T3758] usb 6-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.40 [ 417.539944][ T3758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.546372][ T3758] usb 6-1: Product: syz [ 417.549423][ T3758] usb 6-1: Manufacturer: ဇ [ 417.553147][ T3758] usb 6-1: SerialNumber: syz [ 417.973056][ T3758] usbhid 6-1:1.0: can't add hid device: -71 [ 417.976558][ T3758] usbhid: probe of 6-1:1.0 failed with error -71 [ 417.986757][ T3758] usb 6-1: USB disconnect, device number 25 06:00:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x3e, 0x0, 0x0, 0x0}, 0x20) 06:00:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) 06:00:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xf, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x3b0, 0x0) 06:00:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1012, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:00:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 06:00:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) shutdown(r0, 0x1) 06:00:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) shutdown(r0, 0x1) [ 418.463819][ T9134] page:ffffea0001df0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77c00 [ 418.471189][ T9134] head:ffffea0001df0000 order:10 compound_mapcount:0 compound_pincount:0 [ 418.476455][ T9134] flags: 0x4fff00000010200(slab|head|node=1|zone=1|lastcpupid=0x7ff) [ 418.481597][ T9134] raw: 04fff00000010200 ffffea0001e50008 ffff888040001450 ffff888011843300 [ 418.486659][ T9134] raw: 0000000000000000 ffff888077c00000 0000000100000001 0000000000000000 [ 418.491929][ T9134] page dumped because: VM_BUG_ON_FOLIO(folio_test_slab(folio)) [ 418.498486][ T9134] page_owner tracks the page as allocated [ 418.503103][ T9134] page last allocated via order 10, migratetype Unmovable, gfp_mask 0x140cc0(GFP_USER|__GFP_COMP), pid 4611, tgid 4610 (syz-executor.2), ts 247620874091, free_ts 0 [ 418.514208][ T9134] get_page_from_freelist+0x1290/0x3b70 [ 418.518156][ T9134] __alloc_pages+0x1c7/0x510 [ 418.521076][ T9134] cache_grow_begin+0x75/0x350 [ 418.524239][ T9134] fallback_alloc+0x1e4/0x2e0 [ 418.527153][ T9134] __kmalloc+0x32e/0x4d0 [ 418.529807][ T9134] vc_do_resize+0x36c/0x1170 [ 418.533266][ T9134] vt_ioctl+0x9f3/0x2b20 [ 418.537049][ T9134] tty_ioctl+0xbbd/0x15e0 06:00:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) shutdown(r0, 0x1) [ 418.541343][ T9134] __x64_sys_ioctl+0x193/0x200 [ 418.546348][ T9134] do_syscall_64+0x35/0xb0 [ 418.549522][ T9134] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 418.553438][ T9134] page_owner free stack trace missing [ 418.557277][ T9134] ------------[ cut here ]------------ [ 418.560661][ T9134] kernel BUG at include/linux/memcontrol.h:478! [ 418.565032][ T9134] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 418.568895][ T9134] CPU: 2 PID: 9134 Comm: syz-executor.3 Not tainted 5.19.0-rc4-syzkaller-00014-g941e3e791269 #0 [ 418.576129][ T9134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 418.583246][ T9134] RIP: 0010:workingset_activation+0x5d6/0x6d0 [ 418.587497][ T9134] Code: 48 89 ef e8 1c 01 00 00 c6 05 6e 9b f6 0b 01 0f 0b e9 00 fc ff ff e8 69 21 ca ff 48 c7 c6 c0 c8 d7 89 48 89 ef e8 fa 00 00 00 <0f> 0b e8 53 21 ca ff 0f 0b e9 02 fb ff ff e8 47 21 ca ff 48 c7 c6 [ 418.600875][ T9134] RSP: 0018:ffffc9002608f6f8 EFLAGS: 00010293 [ 418.604726][ T9134] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 418.609596][ T9134] RDX: ffff888021a36100 RSI: ffffffff81af7626 RDI: 0000000000000003 [ 418.614724][ T9134] RBP: ffffea0001df0000 R08: 0000000000000003 R09: 000000000000ffff [ 418.620466][ T9134] R10: 000000000000ffff R11: 0000000000000001 R12: 0000000000000000 [ 418.625658][ T9134] R13: ffff88802ca34ca8 R14: 0000000000000000 R15: 0000000000000003 [ 418.630737][ T9134] FS: 0000555555a48400(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 418.636605][ T9134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.640785][ T9134] CR2: 000000c006b8d100 CR3: 0000000071b3e000 CR4: 0000000000152ee0 [ 418.646744][ T9134] Call Trace: [ 418.649371][ T9134] [ 418.651657][ T9134] folio_mark_accessed+0x596/0xdd0 [ 418.655296][ T9134] kvm_set_pfn_accessed+0x1d7/0x220 [ 418.658619][ T9134] handle_changed_spte_acc_track+0x1bc/0x290 [ 418.662441][ T9134] __handle_changed_spte+0xc76/0x1820 [ 418.666263][ T9134] ? tdp_mmu_init_child_sp+0x590/0x590 [ 418.670336][ T9134] ? mark_lock.part.0+0xee/0x1910 [ 418.673986][ T9134] __handle_changed_spte+0xc67/0x1820 [ 418.677793][ T9134] ? tdp_mmu_init_child_sp+0x590/0x590 [ 418.681358][ T9134] __tdp_mmu_set_spte+0x229/0x9d0 [ 418.684827][ T9134] ? __handle_changed_spte+0x1820/0x1820 [ 418.689134][ T9134] ? tdp_iter_step_up+0x150/0x150 [ 418.693060][ T9134] __tdp_mmu_zap_root+0x7d4/0x840 [ 418.696893][ T9134] ? clear_dirty_pt_masked+0x520/0x520 [ 418.700636][ T9134] ? lock_release+0x780/0x780 [ 418.703982][ T9134] ? tdp_mmu_zap_root_work+0x70/0x70 [ 418.706935][ T9134] tdp_mmu_zap_root+0x12e/0x330 [ 418.709679][ T9134] kvm_tdp_mmu_zap_all+0x154/0x1b0 [ 418.712805][ T9134] ? kvm_mmu_notifier_invalidate_range+0xd0/0xd0 [ 418.716804][ T9134] kvm_mmu_zap_all+0x27c/0x2c0 [ 418.720631][ T9134] ? kvm_mmu_slot_leaf_clear_dirty+0x4c0/0x4c0 [ 418.725121][ T9134] ? lock_release+0x780/0x780 [ 418.728328][ T9134] ? free_unref_page+0x37c/0x6a0 [ 418.731276][ T9134] ? kvm_mmu_notifier_invalidate_range+0xd0/0xd0 [ 418.735330][ T9134] kvm_mmu_notifier_release+0x5c/0xb0 [ 418.738757][ T9134] ? kvm_mmu_notifier_invalidate_range+0xd0/0xd0 [ 418.742811][ T9134] mmu_notifier_unregister+0x124/0x3b0 [ 418.746283][ T9134] kvm_put_kvm+0x48e/0xb70 [ 418.749038][ T9134] kvm_vcpu_release+0x4d/0x70 [ 418.751970][ T9134] __fput+0x277/0x9d0 [ 418.755131][ T9134] ? kvm_vm_release+0x50/0x50 [ 418.758509][ T9134] task_work_run+0xdd/0x1a0 [ 418.761792][ T9134] exit_to_user_mode_prepare+0x23c/0x250 [ 418.766339][ T9134] syscall_exit_to_user_mode+0x19/0x50 [ 418.770952][ T9134] do_syscall_64+0x42/0xb0 [ 418.774651][ T9134] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 418.778506][ T9134] RIP: 0033:0x7fea43a3bd4b [ 418.781919][ T9134] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 418.797937][ T9134] RSP: 002b:00007fffd6407c80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 418.804351][ T9134] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007fea43a3bd4b [ 418.810321][ T9134] RDX: 00007fea43ba0a18 RSI: ffffffffffffffff RDI: 0000000000000005 [ 418.815898][ T9134] RBP: 00007fea43b9d960 R08: 0000000000000000 R09: 00007fea43ba0a20 [ 418.821033][ T9134] R10: 00007fffd6407d80 R11: 0000000000000293 R12: 000000000006618d [ 418.826186][ T9134] R13: 00007fffd6407d80 R14: 00007fea43b9bf60 R15: 0000000000000032 [ 418.831057][ T9134] [ 418.832992][ T9134] Modules linked in: [ 418.835856][ T9134] ---[ end trace 0000000000000000 ]--- [ 418.840265][ T9134] RIP: 0010:workingset_activation+0x5d6/0x6d0 [ 418.844731][ T9134] Code: 48 89 ef e8 1c 01 00 00 c6 05 6e 9b f6 0b 01 0f 0b e9 00 fc ff ff e8 69 21 ca ff 48 c7 c6 c0 c8 d7 89 48 89 ef e8 fa 00 00 00 <0f> 0b e8 53 21 ca ff 0f 0b e9 02 fb ff ff e8 47 21 ca ff 48 c7 c6 [ 418.859700][ T9134] RSP: 0018:ffffc9002608f6f8 EFLAGS: 00010293 [ 418.866327][ T9134] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 418.874238][ T9134] RDX: ffff888021a36100 RSI: ffffffff81af7626 RDI: 0000000000000003 [ 418.881001][ T9134] RBP: ffffea0001df0000 R08: 0000000000000003 R09: 000000000000ffff 06:00:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) shutdown(r0, 0x1) [ 418.887347][ T9134] R10: 000000000000ffff R11: 0000000000000001 R12: 0000000000000000 [ 418.893727][ T9134] R13: ffff88802ca34ca8 R14: 0000000000000000 R15: 0000000000000003 [ 418.900751][ T9134] FS: 0000555555a48400(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 418.908189][ T9134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.914010][ T9134] CR2: 000000c006b8d100 CR3: 0000000071b3e000 CR4: 0000000000152ee0 [ 418.921596][ T9134] Kernel panic - not syncing: Fatal exception [ 418.926505][ T9134] Kernel Offset: disabled [ 418.929253][ T9134] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:00:23 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802ca3f740 RCX=ffffc9000375a000 RDX=0000000000040000 RSI=ffffffff816efb77 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90026daf5b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=1ffffd4000216eca R12=ffffed1005947ee9 R13=0000000000000002 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816efb7e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f3740536700 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88802c800000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000074418000 CR4=00152ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00ff000000000000000000000000ff00 XMM03=30323431352e38313420205b203a6c65 XMM04=000000000000000000ff000000000000 XMM05=000000000000000000ff000000000000 XMM06=343220733a202c2932000a302073635f XMM07=6d6e5520657079746574617267696d20 XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=0000000000000000 RCX=1ffffffff1b762e9 RDX=0000000000000000 RSI=0000000000000003 RDI=ffffffff8134f0bd RBP=ffffffff8beb2e20 RSP=ffffc90002fc7720 R8 =0000000000000000 R9 =0000000000000000 R10=fffffbfff17d65c4 R11=000000000008a07a R12=0000000000000000 R13=fffffbfff17d65c4 R14=0000000000000001 R15=ffff88802c93adc0 RIP=ffffffff8134f0c8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555556b9b400 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f23b73691b8 CR3=0000000072d13000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000027800000004ffffffff00000130 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff845fbcf1 RDI=ffffffff91224a80 RBP=ffffffff91224a40 RSP=ffffc9002608f058 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=0000000000000020 R14=ffffffff845fbc90 R15=0000000000000000 RIP=ffffffff845fbd1b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555a48400 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000c006b8d100 CR3=0000000071b3e000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=ffffe8ffada0be80 RCX=0000000000000000 RDX=ffff888014fc41c0 RSI=ffffffff816efb77 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900052cf950 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=fffff91ff5b417d1 R13=0000000000000002 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff816efb79 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f23b739c028 CR3=000000000ba8e000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000