last executing test programs: 48.828164469s ago: executing program 1 (id=235): mkdir(0x0, 0x9) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x0, 0x0, 0x4cde31dae10bb204}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd2c, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}]}, 0x154}}, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005fc0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r8, r1, 0x0, 0x80000000) 48.75081602s ago: executing program 1 (id=236): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xecc, 0x10000) r3 = socket$inet(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x4, 0xc3, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x66, 0x0, 0xb, 0x29, 0x0, @remote, @remote}}}}) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x8) r4 = socket(0x840000000002, 0x3, 0xfa) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000180)=0x1, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, &(0x7f0000000100)) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000001740)={0xdf, 0x0, 0x12000}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="ba3848902b32f364d2974cd596360bc20ae243b848ead571376844f3d0dc238d2187fa0c50288b8ba1b18607d53ecd00fe9e4cb1de88a4161d1d9770aefc33b2ec51716e1894dfe816c9e2ebf80c31a053c18cd50eb7b6778c42123a88d7a92ef3e4897063cfdd5ab0382d98326f517c0e84cf141e88b76137203e9487f1d470ee8ede2c707971cba79cae11ec4b4e299976a1cc21", 0x95}, {&(0x7f00000003c0)="310b74ed2b1726008c3e8c8ed3c1fb503fbcd6d53bcced1b8712c9ff96f3a1dabc4a68716d1950579e59dd63c12d382892f4f6e0ab0dcec0b740a027b6c576f9e94bc2be48a2af7c14f2a7c47889e0a3dcce8e89b337f9e465b23725b2ff7a9f0489237a3427e6d6e8ec3c68d7e50ce9a55271ce81aa13c0115a10de563e123e122250d6ae5fcc027b0764", 0x8b}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="d7e4015a467edac2d7288eba2a3b49a72c883e8b26be75fc0ecc6fcb45abc4ff1b5f6de7f3ebbd892e1cd64331af1f2edef839e311304dcee681b5d3d067017e1b60fb46afdc70e55da64b5a7906407c63fdf3dbda8aee2073d4e2817bbf83ea5c9aabddb3498bdab1d95bd6d53a6565988dc9c85d0aa5374ce71323f1865ad11586a0962e04d76ca64d8afae048f9b86d137d397b81442083301978bb4437eed6b74aa45365866f256df00a74e7bd3aaddb18406797f60e55b09e3693", 0xbd}, {&(0x7f0000001540)="2ac4336dcfee1b0853337d92c65b3a5d5d5d2e0c4b22713115be57fc2acc09482dc626d4fd322edf3fd3cd366ac99f0ceb540472c7b352749ca14a3e51ef690873c1fe3aafa5f14c0c7d1e9e3ac37a09ce750faff9428c0f266d7a82aaa80bafb2d1e3865c76119ad6eeb0a75b01b761258b1647a543c8fb6312b013695e6df6ff6a5b9c9b62e137554b81365fdb07ba2daecc64af8d44ba29e239c5efd101df556e640908078753c1962df6f83fed4541908a59c69b584955dda7eaa001e99fca050ce48a607fed7e53a4f28016784bce65611345ad8f", 0xd7}, {&(0x7f0000001640)="cd9312d09f18f6cab0fb3c08c9c76e99b8093f16e8aa38037b2a5e17f0880c46d350526e4cfa507b8e08f29fd0ef28dbb703df3b20ec5d48c295bac0c23fb3b54ca0beab3e9cc3372e8f35574ab7a28bc1b8eb46b0dc852b52049c005c8d5d0c52c7f4503c9053e47668050549fb192ccb855e1113b4183839442f4a72693b3d0f70c54b2e78ed678b87c69f3b4e4e", 0x8f}], 0x6, 0x2, 0xffff, 0x10) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000001700)) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x571, 0x0, 0x100000000}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x6, 0x4, 0xf00, 0x0, @adapter={0x8000, 0x4, 0x8, 0x9, 0x6}}]}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 48.676222631s ago: executing program 1 (id=238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) epoll_create(0x7) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000002) (async) mlockall(0x1) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/41, 0x29}, 0x401}], 0x1, 0x40012141, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001600)={0x0, 0x0}, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) timer_create(0x4, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r2, 0x5) (async) accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x80800) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r4 = epoll_create1(0x80000) r5 = epoll_create(0x7) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)) r6 = epoll_create1(0x0) (async) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 48.426900685s ago: executing program 1 (id=243): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000ec0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000f40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x19}, @flat=@binder={0x73622a85, 0x100, 0x2}, @ptr={0x70742a85, 0x8000, 0x0}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3169e45", 0x4, 0xffffffffffffffff) (async) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c3169e45", 0x4, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x40, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)=@chain) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x5b3393367dc26357) close(r6) socket(0x18, 0x0, 0x2) (async) socket(0x18, 0x0, 0x2) connect$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r2}, 0x10) fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) (async) r7 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x80, &(0x7f0000000480)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000080)="9be7ad32353843d985e4dc6afcb8ddb8", 0x10}, {&(0x7f00000001c0)="1f48050c4d3dda092118a9e5c95b925cb67ce80a62c5853ab3e9ef1d3ff7d8a058cb8640d0ea1cb59e058417dc74707753743d9375948620b75a514ea5d77cf3f5e1cea5b13d543e9df4521e3758bf0a5baa9373902bcf010e7f3c42ba3fa104913dc585f5ce2eaf3c0368d244146185e8ea2ebbaa5dc1e6dee787a28304d44e220c1098b35a2c87b9ceab97e5cda29410c5a7d2c1f94ac8ff4dc1d197310b374882d7589299ebcd4a02566545ad21581500e7a6f0c1ad50840911b07c8f60c70771a2dc5756d316b205540e6f4116bdc529c1c1dbe8ea71954c830aa57be720a8b9daf22e20d7f8a4b346ee272f0a2532cdf57465", 0xf5}, {&(0x7f00000000c0)="3947a2092fd069a9ccfc", 0xa}], 0x4, &(0x7f0000000140)}}, {{&(0x7f00000002c0)=@phonet={0x23, 0xef, 0x66, 0xc0}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="6e412bd811efdb931dbd5f4c8eedb6f9d9092c9ac005afa895abaa259f5ec06a256b4aaa0c1bcec5382abf9e", 0x2c}], 0x1, &(0x7f00000015c0)=[{0xa0, 0x0, 0xfffffe00, "51bd723959cb5b88c0ada13075f70d2d4f9aeb98ef52e3c60eafd29b1ad3c0b8babe4f5b0a7caffb1bc13cf4519ba353888dc0a921e04abd4484d18d52b2dff888e8db642e572cf142c4b044e3e91430c84aac7a1cde0b59e59a4b7f4dc07859b9be46fb1d16b2f64a57865357bba7297d066b5819cca47576d102e990a0a5f087c235a72b146daad994c963b6"}, {0x70, 0x11, 0x7f, "00f714f58130c052c365a73a492b46650e35e39fad99930cd20d4a6ac0a9de515b282fa1354fca005f9d8f64e049f3cd6dc2d00c3e8955dd1de065b1531e96d5c9cc940eeeb27f9594f90436b4124eb369eb7903270761a28769222faba5"}, {0x80, 0x103, 0x4, "f24bbc49929d6a5bf31d654756135a018f51e7cde0ec13e311fb4708f1ea030f1e3f9dd5439080ba61ce0af3d9de1b634d32e087d97dbd7a5704f733f2a034914d13b6784f8f87c0ad5716a1b338c7e3b6a486c1ef3e0ad9ca663349b838373cd9e360d44965c52791"}], 0x190}}], 0x3, 0x40) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) openat$incfs(r8, &(0x7f0000000000)='.log\x00', 0x20a80, 0x98) (async) openat$incfs(r8, &(0x7f0000000000)='.log\x00', 0x20a80, 0x98) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, 0x0, 0x0) (async) bind$inet(r9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 48.368137816s ago: executing program 1 (id=244): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) 48.243876348s ago: executing program 1 (id=245): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='((\x00', 0x0, r1) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080)=0x1) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000000c0)=""/248) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@multicast1, 0x1, 0x0, 0xa0, 0x0, [{@multicast2}, {@empty}, {@empty}, {@multicast1}, {@dev}, {@loopback}, {@broadcast}, {@remote}, {@empty}, {@remote}]}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bind$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x50000, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xffffffff}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x800}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xf0}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x4) (async) preadv(r0, &(0x7f0000000600), 0x0, 0x4, 0x10001) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000640)={0x2, 0x7}, 0x4) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000680)='-+,,\x00') (async) close_range(r2, r1, 0x0) r5 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000006c0)={0x1, 0x7, 0x8}) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000700)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/153, 0x99}, {&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/217, 0xd9}, {&(0x7f0000000b00)=""/113, 0x71}], 0x5, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x12050) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r7) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xa8, r13, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ac}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) r14 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r14, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000002f80)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000001340)={0x1bd4, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b0, 0x11d, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x3}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0xa}, {0x1, 0x5}, {0x6, 0x8}, {0x4, 0x4}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x1}, {0x6, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x2}, {0x0, 0x9}, {}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x6}, {0x1, 0xa}, {0x4, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xc, 0x60, 0x3, 0x48, 0x6c, 0x18, 0x6, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x49, 0xfaf22ac1e4b5b391, 0x16, 0x18, 0x30, 0x30, 0x1b]}]}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0xc, 0x1b, 0x6, 0x24, 0x24, 0x16, 0x16, 0x48, 0x30, 0x6c, 0x9, 0x3, 0x12, 0x30, 0x24, 0x5, 0x30, 0x1, 0x2, 0x16, 0x4, 0x2, 0x5, 0x14, 0x16, 0x9, 0x0, 0x16, 0x6c]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7fff, 0x7, 0xfffb, 0x3, 0xf000, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x6}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x5}, {0x5}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x7}, {0x5, 0x2}, {0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x8}, {0x6, 0x1}, {0x7, 0x3}, {0x6, 0x5}, {0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x6}, {0x4, 0x3}, {0x3, 0x3}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x2}, {0x2}, {0x7, 0x5}, {0x4, 0x7}, {0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0xc, 0x3, 0x24, 0x2, 0x6, 0x36, 0x24, 0x1b, 0x16, 0x18, 0x18, 0x3, 0x2, 0x2, 0x60, 0x18, 0x60, 0x24, 0x48, 0x48, 0x12, 0x0, 0x48, 0xc, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x7, 0x8, 0xe1, 0x9, 0x6, 0xc3b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2c, 0x4, 0x0, 0x5, 0x5, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x55}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc3d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}]}]}, @NL80211_ATTR_TID_CONFIG={0xb80, 0x11d, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x7f, 0x4, 0x7f, 0x4, 0x6]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x1}, {0x5}, {}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x7, 0x6}, {0x6, 0x7}, {0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x2, 0x6}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x8}, {0x6, 0x5}, {}, {0x6, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x2}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x288, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x4, 0x4}, {0x1}, {0x1, 0x9}, {0x3, 0x6}, {}, {0x7}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x6}, {0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x5}, {0x7, 0x8}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x7, 0xa}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x1}, {0x1}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x633, 0xcd72, 0x7f, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x12, 0x36, 0xb, 0x6c, 0x30, 0x48, 0x12, 0x9, 0x12, 0x24, 0x5, 0x1b, 0x16, 0x46, 0x6, 0x16, 0x48, 0x1, 0x4, 0x24, 0x4, 0x48, 0x30, 0x18, 0x6, 0x1, 0x24, 0x60, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaf9, 0x40, 0x2, 0x80, 0x1, 0xd, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x6}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x401, 0x9, 0x4, 0x1, 0x0, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x4, 0x6}, {0x5, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x7}, {0x1}, {0x1, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x3, 0x8}, {0x4}, {0x1, 0x2}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x3}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x1}, {0x7, 0x8}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x7}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x8}, {0x4, 0x7}, {0x3, 0x5}, {}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x4}, {0x3}, {0x2, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x9}, {}, {0x1, 0x3}, {0x1}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x3, 0x6}, {0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x6}]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0xa}, {0x0, 0x5}, {0x3, 0x8}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {}, {0x7}, {0x2, 0x1}, {0x6, 0x19}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x6}, {0x7, 0x19}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x6}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x2}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x5, 0x4}, {0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x7, 0xa}, {0x2, 0x6}, {0x2, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0x5}, {0x1, 0x8}, {0x1}, {0x0, 0x6}, {0x4, 0x6}, {0x2, 0x4}, {0x6, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ce2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x13}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3dd7}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x9}, {0x7, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x3}, {0x4, 0x1}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x4}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x3, 0x100, 0x5, 0x9, 0x24f2, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xc452, 0x10, 0x661d, 0x9, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x6}, {0x2, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x2}, {0x2}, {0x3, 0x3}, {0x0, 0x5}, {0x5}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x7}, {0x6}, {0x5, 0x6}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0xb, 0x36, 0x6, 0x36, 0x6c, 0x4, 0x12, 0xb, 0x36, 0x48, 0x24, 0x48, 0x24, 0x7c, 0x5, 0x2, 0x60, 0xc, 0xb, 0x6, 0x36, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x10, 0xc, 0x9, 0x6, 0x8c3, 0x1]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0x5, 0x6, 0x8, 0x7, 0xc9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0xa}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x358, 0x81, 0x9, 0x4, 0x1, 0x9, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x3}, {0x3}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x7}, {0x1}, {0x3, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x0, 0x3}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x660, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x218, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x892, 0x8, 0x7, 0xe98b, 0xca9, 0x1, 0x7]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc71d, 0xff, 0x4, 0xf9c, 0x2, 0x4, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x5}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x2}, {0x7, 0x3}, {0x5, 0x5}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x2}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x7}, {0x5, 0x4}, {0x4, 0x4}, {0x4}, {0x6, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x16, 0x2, 0x18, 0xb, 0x7b, 0x1, 0x1b, 0x1, 0xc, 0x2, 0xc, 0x1, 0xb, 0x30, 0x2, 0x6, 0x3, 0x56, 0x2, 0x1]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x8}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x4}, {0x7, 0x4}, {0x6, 0xa}]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x12, 0x18, 0x14, 0x18, 0x5, 0x69, 0x36, 0x6c, 0x24, 0x6, 0x4, 0x48, 0x16, 0x60, 0xc, 0xc, 0x6c, 0x16]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x9}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x3}, {0x6, 0x18}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x9}, {0x7, 0x7}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x7}, {0x6, 0x3}, {}, {0x0, 0x3}, {0x5, 0x5}, {}, {0x5, 0x2}, {0x4, 0x6}, {0x2, 0x1a}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x4, 0x1}, {0x5}, {0x6, 0x8}, {0x5, 0x7}, {0x5, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0x4}, {}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x9, 0xc, 0x1, 0x3, 0x48, 0x18, 0x36, 0x2, 0xb, 0x60, 0x4, 0xfb794c668b8bb5a1, 0x60, 0xc, 0x12, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5c47, 0x5, 0x4, 0xf801, 0xffff, 0xf9e9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x100, 0x1, 0xa22, 0x0, 0x9, 0x1]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x12, 0x60, 0xc, 0x12, 0x36, 0x18, 0x4, 0x12, 0x36, 0x18, 0x810edc1c76a86ac2, 0x9, 0x16, 0x12, 0x60, 0x1b, 0x4, 0x24, 0x1, 0x60, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x8, 0x5, 0x7, 0x2, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x4, 0x3, 0x2, 0x3, 0xe, 0x6, 0x9, 0xb, 0x16, 0x1b, 0x5, 0x60, 0x6c, 0x24, 0x48, 0x30, 0x9, 0x36, 0x3, 0x0, 0x9, 0x1, 0x0, 0x5, 0x24, 0x6, 0x30]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x78, 0x18, 0x16, 0x6c, 0x16, 0x6, 0x6, 0x0, 0xc, 0x3, 0x5, 0x6, 0x5, 0x6, 0x36, 0xb, 0x30, 0xb, 0x0, 0xc, 0x1b, 0x24, 0x1, 0x18, 0x3, 0x48, 0x5, 0x30, 0x4, 0x48, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xcc8, 0x1, 0x3, 0xa1, 0x6, 0x9, 0x7fff]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x3}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x5, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x2, 0x4}, {0x1}, {0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x334, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xfcab, 0x3, 0x6, 0x2, 0x83, 0x0, 0x407]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x0, 0x8, 0x830, 0xff, 0x8000, 0x1ff]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x9}, {0x5}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x4, 0x7}, {0x6, 0x9}, {0x1}, {0x5}, {0x4, 0x8}, {}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x8}, {0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x5}, {0x6, 0x2}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x3, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x5, 0x5, 0x4, 0x4, 0x800, 0x7a]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x2}, {0x3, 0x6}, {0x3}, {0x7, 0x2}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0xa}, {0x6}, {0x7, 0x3}, {0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x8}, {0x4, 0x8}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x6}, {0x6, 0x5}, {0x3}, {0x1, 0x8}, {0x3}, {0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0xfc, 0x4, 0xa, 0xfff, 0x8000, 0x81, 0x400]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x2, 0x6}, {0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x1c}, {0x4, 0x1}, {0x6, 0x6}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x6}, {0x0, 0x3}, {0x3, 0x9}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x3}, {0x3}, {0x6}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x9}, {0x3, 0x1}, {0x3, 0x9}, {}, {0x3, 0x8}, {0x3}, {0x1, 0xa}, {0x4}, {0x6, 0x9}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x4}, {0x0, 0x9}, {0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5e, 0x36, 0x2, 0x1b, 0x24, 0x5, 0x6c, 0x2a, 0x4, 0xc, 0x36, 0x12, 0x48, 0xb, 0x60, 0x5, 0x3, 0x12, 0x24, 0x5, 0x60, 0x16, 0x24, 0xb, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x2d12, 0xffff, 0x7f, 0x0, 0xc03c, 0x3]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6}, {0x2, 0x3}, {0x4, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xff, 0xbd, 0x7, 0x9, 0x5, 0x3, 0x2]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x9, 0x90b0, 0x10, 0x7, 0xffff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x1}, {0x0, 0xa}, {0x5, 0x6}, {}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x1}, {0x1, 0xa}, {0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0x6}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x1a}, {0x3}, {0x6, 0x1}, {0x2}, {0x4, 0x5}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x9}, {0x7, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x78e9a6bf6ab655a1, 0x30, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x8, 0x0, 0x0, 0xfffd, 0x0, 0x5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0xf4c, 0x8, 0x2f, 0xff, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x4}, {0x2, 0x3}, {0x2, 0x6}, {0x7}, {0x4, 0x1}, {0x7, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x18, 0x9, 0x2, 0x2, 0x9, 0xc, 0x30, 0x12, 0x0, 0x48, 0x6c, 0xa9af91e9d00f9ae5, 0x1, 0x5]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0xa}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x6}, {0x3, 0x2}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x0, 0x7, 0x8001, 0x2, 0xed1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa8, 0x400, 0x6, 0x70, 0x5, 0xf, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x2, 0xfc8, 0x7ff, 0x8, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x1b, 0x18, 0x9, 0x9, 0x30, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x2}, {0x5, 0x1}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x18, 0x5, 0x3d, 0x1b, 0x60, 0x6c, 0x1, 0x16, 0x5, 0x3]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x1, 0x5, 0x4, 0x1, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x16, 0x0, 0x6, 0x12, 0x36, 0xc, 0xb, 0x12, 0x6c, 0x0, 0x36, 0x5, 0x6, 0x3, 0x6, 0x2, 0x6c, 0x1, 0x5, 0x6c, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x3}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x3}, {0x4, 0x9}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x7}, {0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x3, 0x1}, {0x3, 0x1a}, {0x5, 0x6}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x1}, {0x2}, {0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x6}, {0x2}, {0x4, 0x2}, {0x0, 0x5}, {0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe, 0x9, 0x48, 0x4, 0x9, 0xfffa, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e4, 0x11d, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb6c4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x12, 0xb, 0x4, 0x16, 0x6, 0x48, 0xc, 0x9, 0x1, 0x6, 0x5, 0xb, 0xc, 0xb, 0x60, 0x1, 0x1b, 0x60, 0x0, 0x24, 0x12, 0x30, 0x4, 0xc, 0x9, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x2, 0x8, 0x1, 0xfffe, 0x400, 0xf7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x60, 0x18, 0x1, 0x6, 0x1, 0x12, 0x9, 0x6c, 0x24, 0x6c, 0x30, 0x60, 0x9, 0xc, 0x2, 0x36, 0x30, 0x4, 0x18, 0x1b, 0x48, 0x6c, 0xc9253038cfc87852, 0x30, 0x1, 0x16, 0x4, 0x60, 0x18, 0xc02d6f79c783b6c4]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x27, 0x48, 0x3, 0x1, 0x3, 0x7f, 0x55, 0x16, 0x1, 0x12, 0x5, 0x6, 0x60, 0x1b, 0xc, 0x18, 0x16, 0x1, 0xc, 0x5, 0x12, 0x24, 0x5, 0x9, 0x1b]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa6ba, 0x80, 0x7, 0x8001, 0x200, 0x2, 0xc04]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f72, 0xfffa, 0x0, 0x1, 0x6, 0x81, 0x3ff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x3, 0x24, 0x48, 0x12]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x1}, {0x6, 0x2}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x9}, {0x6, 0xe}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x5, 0x4}, {0x4, 0x7}, {0x0, 0x8}, {0x3}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x3, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x2, 0x3}, {0x4}, {0x0, 0x9}, {0x5}, {0x5, 0x2}, {0x1}, {0x5, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x2, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0x1}, {0x7, 0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x4}, {0x7}, {0x7, 0x6}, {0x0, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x300, 0x11d, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x4, 0x12, 0xc, 0x6, 0x12, 0x23227039eb674bdc, 0x36, 0x12, 0x18, 0x1, 0x18, 0x12, 0x1b, 0x3, 0x9, 0x1, 0x30, 0x30, 0x1, 0xc, 0x12, 0xc, 0x24, 0x3, 0x7a]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x7}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x1}, {0x4, 0x2}, {0x6}, {0x5, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x6, 0x9}, {0x3, 0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x5, 0x7}, {0x6, 0x9}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x2}, {0x1, 0x3}, {0x4}, {0x5, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x1b, 0x60, 0xc, 0x12, 0x6c]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x5, 0x9, 0x1, 0x6, 0x2, 0x4, 0xc, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x10, 0x400, 0x1000, 0x2, 0xfffb, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x4, 0xff, 0x3, 0x7, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3a, 0x7ff, 0x9, 0x7, 0x0, 0x2065, 0x5d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x1, 0x4, 0x4, 0x4, 0x9, 0x316]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x0, 0xff, 0x7, 0x3, 0x8, 0x5461]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x9, 0x4, 0xb, 0x6, 0xfa00, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x3}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x7}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x9}, {0x1, 0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {}, {0x6, 0x7}, {0x1, 0x4}, {0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x6, 0x5}, {0x2, 0x7}, {}, {0x2, 0x9}, {0x0, 0x18}, {0x5}, {0x0, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x9}, {0x7}, {0x6, 0x9}, {0x3, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x7}, {0x3, 0x9}, {0x7, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x6}]}]}]}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x4, 0x6, 0x6c, 0x6c, 0x1, 0x18, 0x5, 0x2, 0x12, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x7, 0x8, 0xffff, 0x7, 0x81, 0x6, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x4}, {}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0xa}, {0x1}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x9, 0x18, 0x36, 0x4]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x36, 0x16, 0x18, 0x5, 0x4, 0xc, 0x18, 0x9, 0x1b]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x35, 0x0, 0x24, 0x3, 0xb, 0x24, 0xc, 0x12, 0xb, 0x1, 0xc, 0x9, 0x16, 0x1]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x18, 0x1, 0x1b, 0x48, 0x18, 0x3, 0x18, 0x6, 0x3, 0x6c, 0x30, 0x0, 0x5, 0x71, 0x48, 0x9, 0x9, 0xc, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x6, 0x1, 0x0, 0x8, 0x57, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x8}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x2}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x7a0, 0x11d, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x465c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x388, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x120, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x4, 0x7fff, 0x537, 0x8b, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff, 0x1, 0x7, 0x1ff, 0x9, 0x8, 0xbc]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x6}, {0x4, 0x7}, {0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x2}, {0x3, 0x1a}, {0x0, 0x4}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x7, 0x5}, {}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x5}, {0x0, 0x4}, {0x3, 0x4}, {0x4, 0x7}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x2, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x8}, {0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x7}, {0x3}, {0x0, 0x8}, {0x4}, {0x2, 0x8}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x3}, {0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x2, 0x6}, {0x5, 0x9}, {0x7, 0xa}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x3, 0xc, 0x30, 0x18, 0x12, 0x2, 0x12, 0x60, 0x9, 0x1, 0x6c, 0x48, 0x18, 0x6, 0x48, 0x12, 0x16, 0x2, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33, 0xfd, 0x3a, 0x5, 0x9, 0xe, 0x2afd, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x6}, {0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0xa}, {0x5}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x2}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x16, 0x9, 0x24, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x5, 0xc43c, 0x7, 0x7, 0x40, 0x0, 0xc4ec]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf800, 0x7, 0xd4, 0x5, 0x5, 0x0, 0xf13, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7f, 0x0, 0x5, 0x9, 0x0, 0x2, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x30c6, 0x4, 0x81, 0x1, 0x4, 0x4]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x6, 0x2, 0x88d, 0x6, 0x9, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xed, 0x6b7, 0x8, 0xfffe, 0x3ff, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x2}, {0x7, 0x5}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0x6}, {0x4, 0x2}, {0x3}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x4, 0x3}, {0x7, 0x2}, {0x5, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x4}, {0x6, 0x5}, {0x6, 0x6}, {0x6}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x12, 0xb, 0x60, 0xc, 0x6, 0x6c, 0x60, 0x36, 0x2, 0x4, 0x6c, 0x48, 0x1, 0x2, 0x4d, 0x5, 0x24, 0x16, 0x55]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xc, 0x9, 0x6, 0x5, 0x6b, 0x4, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x6, 0x79, 0x22a8, 0x9, 0x22fb, 0x1]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x6}, {0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x6, 0xa}, {0x6, 0x5}, {0x5, 0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x6, 0x9}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x2}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x5}, {0x3}, {0x7, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x40, 0x0, 0x83e5, 0x10, 0xc, 0x3be, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0xc, 0x5, 0x7fff, 0x5, 0x1ff, 0xe, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3ff, 0x0, 0x3, 0x3, 0x1, 0x9, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x80, 0xe0d, 0xb, 0x3, 0xa, 0x200, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x24, 0x12, 0x24, 0x4, 0x5, 0x36, 0x5, 0x2, 0x16, 0xb, 0xc, 0x2b, 0x1, 0xb, 0x16, 0xb05231e1e3038183, 0xc731de8970e86f11, 0x6c, 0xb, 0xc, 0x30, 0x0, 0x5, 0x5, 0x24, 0x48, 0x9, 0x5, 0x12]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x2}, {0x4, 0x9}, {0x6, 0x4}, {}, {0x5}, {0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x5}, {0x4}, {0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x7}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x7}, {0x6, 0x8}, {0x3, 0xa}, {0x6, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x4}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x50, 0x9, 0x1, 0x9, 0x3, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0x400, 0x6, 0x1, 0x6, 0x3e6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xb97f, 0x7fff, 0x1, 0x0, 0x5, 0xfff9, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x2, 0x1, 0x1, 0x3, 0x3, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x3}, {0x1, 0x7}, {0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x2}, {0x6, 0xa}, {0x6, 0x2}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x3}, {0x6, 0xa}, {0x6, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x3, 0x5}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x8}, {0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x6}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x5}, {0x3, 0x6}, {0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x7}, {0x3, 0x4}, {0x5, 0x3}, {0x2, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x3}, {0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe00, 0x4, 0x188, 0x7, 0x3, 0x5, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9d5, 0x6, 0x41f7, 0x6, 0x3, 0x4, 0x800]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x2, 0x1}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x9}, {0x5, 0x3}, {}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x16, 0x16, 0x24, 0x16, 0xc, 0x36, 0x24, 0x48, 0x48, 0x6, 0xb, 0x1b, 0x1, 0x12, 0xc, 0x4, 0x6c, 0x60, 0x48, 0x16, 0x4]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3e}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x7, 0x8}, {0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x1, 0x9}, {0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x3, 0x8}, {0x1}, {0x3, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc4d1, 0xab3, 0x0, 0x8, 0x8, 0x6, 0xbf, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x1, 0x1000, 0x3, 0xc, 0x9, 0x401, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xada, 0x6, 0x1, 0x5, 0x7, 0x8, 0x8, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x9, 0x9, 0x3, 0x4, 0x3ff, 0x8]}}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x0, 0x8, 0x4, 0x8, 0x10, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x9244, 0x6, 0x1, 0x0, 0x6, 0x8, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x4, 0x5}, {}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x1}, {0x6, 0x6}, {0x7, 0x9}, {0x4, 0x2}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x8}, {0x7, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x5}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x2}, {0x6, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x4, 0x2}, {0x2, 0x4}, {0x2}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x2, 0x4}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x5}, {0x6, 0xa}, {0x3, 0x6}, {0x4, 0x9}, {0x4}, {0x5}, {0x1, 0x4}, {0x6}, {0x6, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0xf}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x5}, {}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x7}, {0x4}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x1bd4}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_clone3(&(0x7f0000004140)={0xa0014200, &(0x7f0000002fc0), &(0x7f0000003000)=0x0, &(0x7f0000003040), {0x16}, &(0x7f0000003080)=""/4096, 0x1000, &(0x7f0000004080)=""/75, &(0x7f0000004100)=[r9, r9], 0x2, {r0}}, 0x58) ioctl$BINDER_FREEZE(r12, 0x400c620e, &(0x7f00000041c0)={r15}) (async) ioctl$KDFONTOP_COPY(r10, 0x4b72, &(0x7f0000004600)={0x3, 0x0, 0x14, 0x9, 0x1fd, &(0x7f0000004200)}) 48.208583058s ago: executing program 32 (id=245): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='((\x00', 0x0, r1) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080)=0x1) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000000c0)=""/248) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@multicast1, 0x1, 0x0, 0xa0, 0x0, [{@multicast2}, {@empty}, {@empty}, {@multicast1}, {@dev}, {@loopback}, {@broadcast}, {@remote}, {@empty}, {@remote}]}}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bind$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x50000, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xffffffff}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x800}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xf0}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x4) (async) preadv(r0, &(0x7f0000000600), 0x0, 0x4, 0x10001) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000640)={0x2, 0x7}, 0x4) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000680)='-+,,\x00') (async) close_range(r2, r1, 0x0) r5 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000006c0)={0x1, 0x7, 0x8}) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000700)) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/153, 0x99}, {&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/217, 0xd9}, {&(0x7f0000000b00)=""/113, 0x71}], 0x5, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x12050) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r7) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xa8, r13, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ac}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) r14 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r14, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000002f80)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000001340)={0x1bd4, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b0, 0x11d, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x3}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0xa}, {0x1, 0x5}, {0x6, 0x8}, {0x4, 0x4}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x1}, {0x6, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x2}, {0x0, 0x9}, {}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x6}, {0x1, 0xa}, {0x4, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0xc, 0x60, 0x3, 0x48, 0x6c, 0x18, 0x6, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x49, 0xfaf22ac1e4b5b391, 0x16, 0x18, 0x30, 0x30, 0x1b]}]}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0xc, 0x1b, 0x6, 0x24, 0x24, 0x16, 0x16, 0x48, 0x30, 0x6c, 0x9, 0x3, 0x12, 0x30, 0x24, 0x5, 0x30, 0x1, 0x2, 0x16, 0x4, 0x2, 0x5, 0x14, 0x16, 0x9, 0x0, 0x16, 0x6c]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7fff, 0x7, 0xfffb, 0x3, 0xf000, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x6}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x5}, {0x5}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x7}, {0x5, 0x2}, {0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x8}, {0x6, 0x1}, {0x7, 0x3}, {0x6, 0x5}, {0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x6}, {0x4, 0x3}, {0x3, 0x3}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x2}, {0x2}, {0x7, 0x5}, {0x4, 0x7}, {0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0xc, 0x3, 0x24, 0x2, 0x6, 0x36, 0x24, 0x1b, 0x16, 0x18, 0x18, 0x3, 0x2, 0x2, 0x60, 0x18, 0x60, 0x24, 0x48, 0x48, 0x12, 0x0, 0x48, 0xc, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x7, 0x8, 0xe1, 0x9, 0x6, 0xc3b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2c, 0x4, 0x0, 0x5, 0x5, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x55}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc3d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}]}]}, @NL80211_ATTR_TID_CONFIG={0xb80, 0x11d, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x7f, 0x4, 0x7f, 0x4, 0x6]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x1}, {0x5}, {}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x7, 0x6}, {0x6, 0x7}, {0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x2, 0x6}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x8}, {0x6, 0x5}, {}, {0x6, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x2}, {0x6, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x288, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x4, 0x4}, {0x1}, {0x1, 0x9}, {0x3, 0x6}, {}, {0x7}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x6}, {0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x5}, {0x7, 0x8}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x7, 0xa}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x1}, {0x1}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x633, 0xcd72, 0x7f, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x12, 0x36, 0xb, 0x6c, 0x30, 0x48, 0x12, 0x9, 0x12, 0x24, 0x5, 0x1b, 0x16, 0x46, 0x6, 0x16, 0x48, 0x1, 0x4, 0x24, 0x4, 0x48, 0x30, 0x18, 0x6, 0x1, 0x24, 0x60, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaf9, 0x40, 0x2, 0x80, 0x1, 0xd, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x6}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x401, 0x9, 0x4, 0x1, 0x0, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x4, 0x6}, {0x5, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x7}, {0x1}, {0x1, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x3, 0x8}, {0x4}, {0x1, 0x2}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x3}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x1}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x1}, {0x7, 0x8}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x7}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x8}, {0x4, 0x7}, {0x3, 0x5}, {}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x4}, {0x3}, {0x2, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x9}, {}, {0x1, 0x3}, {0x1}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x3, 0x6}, {0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x6}]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0xa}, {0x0, 0x5}, {0x3, 0x8}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {}, {0x7}, {0x2, 0x1}, {0x6, 0x19}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x6}, {0x7, 0x19}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x6}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x2}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x5, 0x4}, {0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x7, 0xa}, {0x2, 0x6}, {0x2, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0x5}, {0x1, 0x8}, {0x1}, {0x0, 0x6}, {0x4, 0x6}, {0x2, 0x4}, {0x6, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ce2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x13}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3dd7}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x9}, {0x7, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x3}, {0x4, 0x1}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x4}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x3, 0x100, 0x5, 0x9, 0x24f2, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xc452, 0x10, 0x661d, 0x9, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x6}, {0x2, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x2}, {0x2}, {0x3, 0x3}, {0x0, 0x5}, {0x5}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x7}, {0x6}, {0x5, 0x6}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0xb, 0x36, 0x6, 0x36, 0x6c, 0x4, 0x12, 0xb, 0x36, 0x48, 0x24, 0x48, 0x24, 0x7c, 0x5, 0x2, 0x60, 0xc, 0xb, 0x6, 0x36, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x10, 0xc, 0x9, 0x6, 0x8c3, 0x1]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0x5, 0x6, 0x8, 0x7, 0xc9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0xa}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x358, 0x81, 0x9, 0x4, 0x1, 0x9, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x3}, {0x3}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x7}, {0x1}, {0x3, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x0, 0x3}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x660, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x218, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x892, 0x8, 0x7, 0xe98b, 0xca9, 0x1, 0x7]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc71d, 0xff, 0x4, 0xf9c, 0x2, 0x4, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x5}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x2}, {0x7, 0x3}, {0x5, 0x5}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x2}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x7}, {0x5, 0x4}, {0x4, 0x4}, {0x4}, {0x6, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x16, 0x2, 0x18, 0xb, 0x7b, 0x1, 0x1b, 0x1, 0xc, 0x2, 0xc, 0x1, 0xb, 0x30, 0x2, 0x6, 0x3, 0x56, 0x2, 0x1]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x8}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x4}, {0x7, 0x4}, {0x6, 0xa}]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x12, 0x18, 0x14, 0x18, 0x5, 0x69, 0x36, 0x6c, 0x24, 0x6, 0x4, 0x48, 0x16, 0x60, 0xc, 0xc, 0x6c, 0x16]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x9}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x3}, {0x6, 0x18}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x9}, {0x7, 0x7}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x7}, {0x6, 0x3}, {}, {0x0, 0x3}, {0x5, 0x5}, {}, {0x5, 0x2}, {0x4, 0x6}, {0x2, 0x1a}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x4, 0x1}, {0x5}, {0x6, 0x8}, {0x5, 0x7}, {0x5, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0x4}, {}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x9, 0xc, 0x1, 0x3, 0x48, 0x18, 0x36, 0x2, 0xb, 0x60, 0x4, 0xfb794c668b8bb5a1, 0x60, 0xc, 0x12, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5c47, 0x5, 0x4, 0xf801, 0xffff, 0xf9e9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x100, 0x1, 0xa22, 0x0, 0x9, 0x1]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x12, 0x60, 0xc, 0x12, 0x36, 0x18, 0x4, 0x12, 0x36, 0x18, 0x810edc1c76a86ac2, 0x9, 0x16, 0x12, 0x60, 0x1b, 0x4, 0x24, 0x1, 0x60, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x8, 0x5, 0x7, 0x2, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x4, 0x3, 0x2, 0x3, 0xe, 0x6, 0x9, 0xb, 0x16, 0x1b, 0x5, 0x60, 0x6c, 0x24, 0x48, 0x30, 0x9, 0x36, 0x3, 0x0, 0x9, 0x1, 0x0, 0x5, 0x24, 0x6, 0x30]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x78, 0x18, 0x16, 0x6c, 0x16, 0x6, 0x6, 0x0, 0xc, 0x3, 0x5, 0x6, 0x5, 0x6, 0x36, 0xb, 0x30, 0xb, 0x0, 0xc, 0x1b, 0x24, 0x1, 0x18, 0x3, 0x48, 0x5, 0x30, 0x4, 0x48, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xcc8, 0x1, 0x3, 0xa1, 0x6, 0x9, 0x7fff]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x3}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x5, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x2, 0x4}, {0x1}, {0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x334, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xfcab, 0x3, 0x6, 0x2, 0x83, 0x0, 0x407]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x0, 0x8, 0x830, 0xff, 0x8000, 0x1ff]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x9}, {0x5}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x4, 0x7}, {0x6, 0x9}, {0x1}, {0x5}, {0x4, 0x8}, {}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x8}, {0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x5}, {0x6, 0x2}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x3, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x5, 0x5, 0x4, 0x4, 0x800, 0x7a]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x2}, {0x3, 0x6}, {0x3}, {0x7, 0x2}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0xa}, {0x6}, {0x7, 0x3}, {0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x8}, {0x4, 0x8}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x6}, {0x6, 0x5}, {0x3}, {0x1, 0x8}, {0x3}, {0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0xfc, 0x4, 0xa, 0xfff, 0x8000, 0x81, 0x400]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x2, 0x6}, {0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x1c}, {0x4, 0x1}, {0x6, 0x6}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x6}, {0x0, 0x3}, {0x3, 0x9}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x3}, {0x3}, {0x6}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x9}, {0x3, 0x1}, {0x3, 0x9}, {}, {0x3, 0x8}, {0x3}, {0x1, 0xa}, {0x4}, {0x6, 0x9}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x4}, {0x0, 0x9}, {0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5e, 0x36, 0x2, 0x1b, 0x24, 0x5, 0x6c, 0x2a, 0x4, 0xc, 0x36, 0x12, 0x48, 0xb, 0x60, 0x5, 0x3, 0x12, 0x24, 0x5, 0x60, 0x16, 0x24, 0xb, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x2d12, 0xffff, 0x7f, 0x0, 0xc03c, 0x3]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6}, {0x2, 0x3}, {0x4, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xff, 0xbd, 0x7, 0x9, 0x5, 0x3, 0x2]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x9, 0x90b0, 0x10, 0x7, 0xffff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0xa}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x5, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x1}, {0x0, 0xa}, {0x5, 0x6}, {}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x1}, {0x1, 0xa}, {0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0x6}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x1a}, {0x3}, {0x6, 0x1}, {0x2}, {0x4, 0x5}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x9}, {0x7, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x78e9a6bf6ab655a1, 0x30, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x8, 0x0, 0x0, 0xfffd, 0x0, 0x5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0xf4c, 0x8, 0x2f, 0xff, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x4}, {0x2, 0x3}, {0x2, 0x6}, {0x7}, {0x4, 0x1}, {0x7, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x18, 0x9, 0x2, 0x2, 0x9, 0xc, 0x30, 0x12, 0x0, 0x48, 0x6c, 0xa9af91e9d00f9ae5, 0x1, 0x5]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0xa}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x6}, {0x3, 0x2}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x0, 0x7, 0x8001, 0x2, 0xed1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa8, 0x400, 0x6, 0x70, 0x5, 0xf, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x2, 0xfc8, 0x7ff, 0x8, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x1b, 0x18, 0x9, 0x9, 0x30, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x2}, {0x5, 0x1}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x18, 0x5, 0x3d, 0x1b, 0x60, 0x6c, 0x1, 0x16, 0x5, 0x3]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x1, 0x5, 0x4, 0x1, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x36, 0x16, 0x0, 0x6, 0x12, 0x36, 0xc, 0xb, 0x12, 0x6c, 0x0, 0x36, 0x5, 0x6, 0x3, 0x6, 0x2, 0x6c, 0x1, 0x5, 0x6c, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x3}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x3}, {0x4, 0x9}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x7}, {0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x3, 0x1}, {0x3, 0x1a}, {0x5, 0x6}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x1}, {0x2}, {0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x6}, {0x2}, {0x4, 0x2}, {0x0, 0x5}, {0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe, 0x9, 0x48, 0x4, 0x9, 0xfffa, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e4, 0x11d, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb6c4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x12, 0xb, 0x4, 0x16, 0x6, 0x48, 0xc, 0x9, 0x1, 0x6, 0x5, 0xb, 0xc, 0xb, 0x60, 0x1, 0x1b, 0x60, 0x0, 0x24, 0x12, 0x30, 0x4, 0xc, 0x9, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x2, 0x8, 0x1, 0xfffe, 0x400, 0xf7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x60, 0x18, 0x1, 0x6, 0x1, 0x12, 0x9, 0x6c, 0x24, 0x6c, 0x30, 0x60, 0x9, 0xc, 0x2, 0x36, 0x30, 0x4, 0x18, 0x1b, 0x48, 0x6c, 0xc9253038cfc87852, 0x30, 0x1, 0x16, 0x4, 0x60, 0x18, 0xc02d6f79c783b6c4]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x27, 0x48, 0x3, 0x1, 0x3, 0x7f, 0x55, 0x16, 0x1, 0x12, 0x5, 0x6, 0x60, 0x1b, 0xc, 0x18, 0x16, 0x1, 0xc, 0x5, 0x12, 0x24, 0x5, 0x9, 0x1b]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa6ba, 0x80, 0x7, 0x8001, 0x200, 0x2, 0xc04]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f72, 0xfffa, 0x0, 0x1, 0x6, 0x81, 0x3ff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x3, 0x24, 0x48, 0x12]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0xa}, {0x7, 0x7}, {0x1}, {0x6, 0x2}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x9}, {0x6, 0xe}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x5, 0x4}, {0x4, 0x7}, {0x0, 0x8}, {0x3}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x3, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x2, 0x3}, {0x4}, {0x0, 0x9}, {0x5}, {0x5, 0x2}, {0x1}, {0x5, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x2, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0x1}, {0x7, 0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x4}, {0x7}, {0x7, 0x6}, {0x0, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x300, 0x11d, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x4, 0x12, 0xc, 0x6, 0x12, 0x23227039eb674bdc, 0x36, 0x12, 0x18, 0x1, 0x18, 0x12, 0x1b, 0x3, 0x9, 0x1, 0x30, 0x30, 0x1, 0xc, 0x12, 0xc, 0x24, 0x3, 0x7a]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x7}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x1}, {0x4, 0x2}, {0x6}, {0x5, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x6, 0x9}, {0x3, 0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x5, 0x7}, {0x6, 0x9}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x2}, {0x1, 0x3}, {0x4}, {0x5, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x1b, 0x60, 0xc, 0x12, 0x6c]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x5, 0x9, 0x1, 0x6, 0x2, 0x4, 0xc, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x10, 0x400, 0x1000, 0x2, 0xfffb, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x4, 0xff, 0x3, 0x7, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3a, 0x7ff, 0x9, 0x7, 0x0, 0x2065, 0x5d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x1, 0x4, 0x4, 0x4, 0x9, 0x316]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x0, 0xff, 0x7, 0x3, 0x8, 0x5461]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x9, 0x4, 0xb, 0x6, 0xfa00, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x3}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x7}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x9}, {0x1, 0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {}, {0x6, 0x7}, {0x1, 0x4}, {0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x6, 0x5}, {0x2, 0x7}, {}, {0x2, 0x9}, {0x0, 0x18}, {0x5}, {0x0, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x9}, {0x7}, {0x6, 0x9}, {0x3, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x7}, {0x3, 0x9}, {0x7, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x6}]}]}]}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x4, 0x6, 0x6c, 0x6c, 0x1, 0x18, 0x5, 0x2, 0x12, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x7, 0x8, 0xffff, 0x7, 0x81, 0x6, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x4}, {}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0xa}, {0x1}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x9, 0x18, 0x36, 0x4]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x36, 0x16, 0x18, 0x5, 0x4, 0xc, 0x18, 0x9, 0x1b]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x35, 0x0, 0x24, 0x3, 0xb, 0x24, 0xc, 0x12, 0xb, 0x1, 0xc, 0x9, 0x16, 0x1]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x18, 0x1, 0x1b, 0x48, 0x18, 0x3, 0x18, 0x6, 0x3, 0x6c, 0x30, 0x0, 0x5, 0x71, 0x48, 0x9, 0x9, 0xc, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x6, 0x1, 0x0, 0x8, 0x57, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x8}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x2}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x7a0, 0x11d, 0x0, 0x1, [{0x428, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x465c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x388, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x120, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x4, 0x7fff, 0x537, 0x8b, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff, 0x1, 0x7, 0x1ff, 0x9, 0x8, 0xbc]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x6}, {0x4, 0x7}, {0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x2}, {0x3, 0x1a}, {0x0, 0x4}, {0x1}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x7, 0x5}, {}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x5}, {0x0, 0x4}, {0x3, 0x4}, {0x4, 0x7}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x4}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x2, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x8}, {0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x7}, {0x3}, {0x0, 0x8}, {0x4}, {0x2, 0x8}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x3}, {0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x2, 0x6}, {0x5, 0x9}, {0x7, 0xa}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x3, 0xc, 0x30, 0x18, 0x12, 0x2, 0x12, 0x60, 0x9, 0x1, 0x6c, 0x48, 0x18, 0x6, 0x48, 0x12, 0x16, 0x2, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33, 0xfd, 0x3a, 0x5, 0x9, 0xe, 0x2afd, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x6}, {0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x5, 0xa}, {0x5}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x9}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x2}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x16, 0x9, 0x24, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x5, 0xc43c, 0x7, 0x7, 0x40, 0x0, 0xc4ec]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf800, 0x7, 0xd4, 0x5, 0x5, 0x0, 0xf13, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7f, 0x0, 0x5, 0x9, 0x0, 0x2, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x30c6, 0x4, 0x81, 0x1, 0x4, 0x4]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x6, 0x2, 0x88d, 0x6, 0x9, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xed, 0x6b7, 0x8, 0xfffe, 0x3ff, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x2}, {0x7, 0x5}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0x6}, {0x4, 0x2}, {0x3}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x4, 0x3}, {0x7, 0x2}, {0x5, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x4}, {0x6, 0x5}, {0x6, 0x6}, {0x6}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x12, 0xb, 0x60, 0xc, 0x6, 0x6c, 0x60, 0x36, 0x2, 0x4, 0x6c, 0x48, 0x1, 0x2, 0x4d, 0x5, 0x24, 0x16, 0x55]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xc, 0x9, 0x6, 0x5, 0x6b, 0x4, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x6, 0x79, 0x22a8, 0x9, 0x22fb, 0x1]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x6}, {0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x6, 0xa}, {0x6, 0x5}, {0x5, 0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0xa}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x6, 0x9}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x2}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x5, 0x2}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x5}, {0x3}, {0x7, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x40, 0x0, 0x83e5, 0x10, 0xc, 0x3be, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0xc, 0x5, 0x7fff, 0x5, 0x1ff, 0xe, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3ff, 0x0, 0x3, 0x3, 0x1, 0x9, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x80, 0xe0d, 0xb, 0x3, 0xa, 0x200, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x24, 0x12, 0x24, 0x4, 0x5, 0x36, 0x5, 0x2, 0x16, 0xb, 0xc, 0x2b, 0x1, 0xb, 0x16, 0xb05231e1e3038183, 0xc731de8970e86f11, 0x6c, 0xb, 0xc, 0x30, 0x0, 0x5, 0x5, 0x24, 0x48, 0x9, 0x5, 0x12]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x2}, {0x4, 0x9}, {0x6, 0x4}, {}, {0x5}, {0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x5}, {0x4}, {0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x7}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x7}, {0x6, 0x8}, {0x3, 0xa}, {0x6, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x2}, {0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x4}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x50, 0x9, 0x1, 0x9, 0x3, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0x400, 0x6, 0x1, 0x6, 0x3e6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xb97f, 0x7fff, 0x1, 0x0, 0x5, 0xfff9, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x2, 0x1, 0x1, 0x3, 0x3, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x3}, {0x1, 0x7}, {0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x2}, {0x6, 0xa}, {0x6, 0x2}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x3}, {0x6, 0xa}, {0x6, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x3, 0x5}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x8}, {0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x6}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x5}, {0x3, 0x6}, {0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x7}, {0x3, 0x4}, {0x5, 0x3}, {0x2, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x3}, {0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe00, 0x4, 0x188, 0x7, 0x3, 0x5, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9d5, 0x6, 0x41f7, 0x6, 0x3, 0x4, 0x800]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x2, 0x1}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x9}, {0x5, 0x3}, {}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x16, 0x16, 0x24, 0x16, 0xc, 0x36, 0x24, 0x48, 0x48, 0x6, 0xb, 0x1b, 0x1, 0x12, 0xc, 0x4, 0x6c, 0x60, 0x48, 0x16, 0x4]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3e}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x7, 0x8}, {0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x1, 0x9}, {0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x3, 0x8}, {0x1}, {0x3, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc4d1, 0xab3, 0x0, 0x8, 0x8, 0x6, 0xbf, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x1, 0x1000, 0x3, 0xc, 0x9, 0x401, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xada, 0x6, 0x1, 0x5, 0x7, 0x8, 0x8, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x9, 0x9, 0x3, 0x4, 0x3ff, 0x8]}}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x0, 0x8, 0x4, 0x8, 0x10, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x9244, 0x6, 0x1, 0x0, 0x6, 0x8, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x4, 0x5}, {}, {0x4, 0x1}, {0x7, 0x6}, {0x7, 0x1}, {0x6, 0x6}, {0x7, 0x9}, {0x4, 0x2}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x8}, {0x7, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x5}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x2}, {0x6, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x4, 0x2}, {0x2, 0x4}, {0x2}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x2, 0x4}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x5}, {0x6, 0xa}, {0x3, 0x6}, {0x4, 0x9}, {0x4}, {0x5}, {0x1, 0x4}, {0x6}, {0x6, 0x8}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0xf}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x5}, {}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x7}, {0x4}, {0x5, 0x3}, {0x6, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x1bd4}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_clone3(&(0x7f0000004140)={0xa0014200, &(0x7f0000002fc0), &(0x7f0000003000)=0x0, &(0x7f0000003040), {0x16}, &(0x7f0000003080)=""/4096, 0x1000, &(0x7f0000004080)=""/75, &(0x7f0000004100)=[r9, r9], 0x2, {r0}}, 0x58) ioctl$BINDER_FREEZE(r12, 0x400c620e, &(0x7f00000041c0)={r15}) (async) ioctl$KDFONTOP_COPY(r10, 0x4b72, &(0x7f0000004600)={0x3, 0x0, 0x14, 0x9, 0x1fd, &(0x7f0000004200)}) 5.287254328s ago: executing program 2 (id=758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast1, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800153f00000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) io_setup(0x8, &(0x7f0000000340)) socket$inet_udplite(0x2, 0x2, 0x88) eventfd(0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/98, 0x62, 0x1, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/4096, 0x1000, 0x0, 0x19}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_handle={0x77682a85, 0x3000, 0x1}}, &(0x7f0000000280)={0x0, 0x1, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 5.187448549s ago: executing program 2 (id=759): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast1, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800153f00000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) 5.1344328s ago: executing program 2 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x345a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x453}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x87272cd2b149c301}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x24040801) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc841) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x8000, 0x2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000400)={0x0, 0xa}) r4 = syz_usb_connect$cdc_ncm(0x2, 0x85, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x1, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4686c752"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xa, 0x8}, {0x6, 0x24, 0x1a, 0xf9, 0x3d}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xfff4, 0x7, 0x7f, 0x1, 0x8, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x50, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x2, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0xa, 0xb9}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x310, 0x3, 0x0, 0x7, 0x10, 0x6}, 0xf0, &(0x7f0000000540)={0x5, 0xf, 0xf0, 0x4, [@generic={0xb4, 0x10, 0x0, "5e4507b857d1b379bd2156ff8f836f83482e67a566abcc94d46798299703443290e35bbece1e6610aec454e32143bdad64c217ad5563fbd325409da4e983dbb6d6d613fe6ef4e473e84b365ca8dfd1b1e5c0ddeb8740ea5753044af938c61e49bd8f00aa639edb9668844d2331ce943e9e498a2cb076563afd22d76993490fb4c762b8ed1e0e92582d467c5a2e76444de102415c637cc1135bdae44564d4036417eea14ce5a73cea1f542eb928459b9f4d"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "12f0158e56da773342f3468c03f84727"}, @ssp_cap={0x1c, 0x10, 0xa, 0xb, 0x4, 0xfff, 0xf000, 0xe9, [0xffff30, 0xff3f00, 0xc0cf, 0x30]}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_control_io(r4, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x20, 0x4, 0xca, {0xca, 0x1, "74a314f4138e04b5973c21a39a8400373a24daf2497f6d6903b4e27471b1e4aa5c1be0bf76080f6c07fd67fae17b12554baf19116120b3d6fa5cae61a4cd1ea624c136cac2aea4cbabd1a4360a2837b11cc8dbc6a7eb7b67ee2e20f7ce0785208b1567d2401ee39838c509777fdc8304745e670a71e92d91e3de481a17dca46629481a25f87bd6427e42bf85a93b5cdcd5b350c55f4dabc9923ae560c1552aa503fc61219b81c545ff71d329a6d86a96663a60af34116e5de22776d24640d3bdb9201e255c156c06"}}, &(0x7f00000007c0)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "03237eb7b30e2bbfa50568ed137584914d00c02ce7c15316967c961d8365269a953601fece286bfae4bafcb8f16bf3d7c6eb763b125e74d4d87b6e58dd7f5a4eb85551b7f712983d42f6aa1c4208b578021c2ace3e680c822cda2b37211af3223605c8cc9fd98d243820bcc16af83a1f2119b63fcf8ad0e73833b245ee412149f0047a4e0393e7b0838c8f53ebbbfc8a0e7331eae2e6248437ec25cb8c09b6605254a8515aaaa57189a91049ae1c4474a1b3ec97be6d1cd2d4a11ab0f170a1475e58fe959f8c6706fabc33a6fb03d3e1831fa240aab7b4dd4def"}}, &(0x7f00000008c0)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x2, 0x489a}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x2, 0x101}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "617754e64ac0346b496dfed3bb7c54cd"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x7, 0x3, 0x0, 0x7}, @generic={0x28, 0x10, 0x4, "68ac686fc0466b193e3a9ea3670b43037598700f7c11d42821b60ac82248c2f9b59bed451e"}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x7, 0xe, "808a46ae", "30a4f1a0"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0xc, 0x2, 0x6, 0x2, 0x4d0}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x0, 0x15, 0xcf, "c668044a320efc18353c6a1c715ea059b5dd25cf3145d704360ffa361ad81f5279f8b30db744d3719367d1d574038772a5e5b71d73e77f96949c9ee4c710fe30fa7074d88e7d59eba3500b10715ae7db8180671294be0bf07c775dd87582cb867a6aba41277993e7eb33b213b0c0f9baf3fc9177d142b67813f15e49d44b18a0faa269904087760c8ab0907626667a8da47fe239b499f711f851506dbb8557c20236c29fc43dfd42440143c0dc0a60ccd0e01222fe9fe8343834c8f96119f7bf0c911dfd7fcd9075eccf712ffa35e8"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x1, 0x20, [0xf00f]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "9298"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000d00)={0x40, 0x13, 0x6}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @random="e5875e2b253f"}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "8d55"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x62}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x10}}) writev(r3, &(0x7f0000001180)=[{&(0x7f0000000f80)="d9e3638c747eaa7f3815088759599d43b1f5d4fb93c856611ac36f29cedd9476cc2d0309d212aa3dadcf4ef2644a5c8b10551e68bad1b3dfef796f6b736fa536b87cbac20b6f34965b4192cabbf702d0a8289f7a35d2e00e98a2f5207162e2b6fc940e81690e9ab87068da895155c9170583717a3b23846f7f3b407e05617e5b7e18c477bd5676b55dad66b5e3a43a601ad11181eff3c2e328338a188dd9241344c55540b0b5160b90a0371eedfdb679fa2ad10bc7078ee416c746631e9fe5f481e5e6367d5a2e6aa9edd695dd72ba83c48a0c577970734fcd10b3dd86fadcf50e2fcc83c504b3293e2e204b5456f5a77b6279d223", 0xf5}, {&(0x7f0000001080)="86a78836b5f7006c2265a75db5f8ffeb23b9190a9fce80dacef835dc84278b62c30c879bee2a2f1247396779e14ae6ca49995a04c66dc25b87cb5dfd7946eb38bb07baf2426f5bcde5f830a0e822e3489efb6aece2d0481ab98402342dc6b15c0fef287efe6d0bb391a2e39377c749b1504f1b0812cfabb70114340823d29edb40e774643ae2cbf07d801015f91e5c3808764d39cf55cf39e1d6dac6ae", 0x9d}, {&(0x7f0000001140)="f35aefabb62664176a7a9ee2620216c0831167c34c56d2852d3b8562d2cdb296d9211524ed5e2db1afe39730602edcb8ec6f64fb790a5db64cdf63", 0x3b}], 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000011c0)={0x9, 0x2, 0x80, 0x9, 0x80, 0x8, 0x5}, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r3) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3fe, 0x7c}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040001) syz_clone(0x10000080, &(0x7f0000001340)="b278e2c0a8748c87b59c98e636e316517c8625aaa3b9f70d400af5d4b44211ae637832d9252f0ccf1a3bbdee706d8523feb3aa6779b7763234215dd254e59d5cf32ced695cf765dcce105721", 0x4c, &(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)="f5103e889a8f2b4cd39f493dd2789f92a20577c938686523015750b98a5c4ed4fd6390fd564fa4d3935acdbb7a5b3ef9a00735723bc9ca2748ee6f810c8ad0735451c33a4c8c37e772873b09137bc4ed418619dfa40a785126a228f982e1b0d4a5dbc64623aa1471a365aa298a82453e30f3363ed7aa5584c3ea84fb") r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r6, 0x8004af7a, &(0x7f0000001500)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001880)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f0000001580)={0x298, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1628}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc49}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9a47}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x66d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x29}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x78}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd3be}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x486}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1600000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6cf8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x888c}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6f2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd67}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa3}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x60, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x2f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x331}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x40084) sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000001a00)={{0x0, 0x8, 0x80, 0x7f}, 0x0, 0x0, 0x2, 0x7fffffff}, 0x80, 0x0, 0x0, 0x0) unshare(0x20000100) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xf}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001cc0)={0x24, &(0x7f0000001bc0)={0x40, 0x8, 0x2c, {0x2c, 0x21, "a9943f2eaa1f72ddb9140903f0e4b7efeae5cb3ee41303df44a58ef25d5edfaca0b5c555b6e003831226"}}, &(0x7f0000001c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000001c40), &(0x7f0000001c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x9bc}}}}, &(0x7f0000001e80)={0x2c, &(0x7f0000001d00)={0x20, 0x10, 0x19, "12ec23daa4c9ee30937e739a585ef802b414935b36ab0d7ae0"}, &(0x7f0000001d40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001d80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001dc0)={0x20, 0x1, 0x66, "6202010ce573b7550323c516ac74f34f68b1da4e85f4de569054a5bed48a6e7b75f48d644162b23998623c79a9d619678a14326137915f51a31002c53bbfa83fd001601a092917593206fb9b574b774420a4ca48d337562c151016138f35de30e82adb2fdc00"}, &(0x7f0000001e40)={0x20, 0x3, 0x1, 0xaf}}) r9 = fsopen(&(0x7f0000001ec0)='cpuset\x00', 0x1) fstat(r3, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000300, r10, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x38, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x56}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) 5.062698181s ago: executing program 4 (id=764): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c10000000000000000000", 0x58}], 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, 0x0) (async) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syz_io_uring_setup(0x23af, &(0x7f00000001c0)={0x0, 0xb341, 0x40, 0x0, 0x122}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0xe3dbf3d1777793cf, &(0x7f00000002c0)=0x80000001, 0x0, 0x4) (async) write$uinput_user_dev(r3, &(0x7f0000000e00)={'syz0\x00', {0x804a, 0x2, 0x0, 0x4}, 0x52, [0x2, 0x9, 0x7, 0x6, 0x3, 0x1, 0x8, 0x4, 0x8001, 0x10000, 0x3, 0x0, 0x3, 0x1000, 0x0, 0x6, 0x5, 0x0, 0x1, 0xff, 0x81, 0x200, 0x2, 0xde4acbb, 0x102, 0x1, 0xfffffffe, 0x50, 0x3, 0x1, 0x5, 0x1, 0xc5, 0x8, 0x3, 0xc3d7, 0xa36, 0x9, 0x4, 0x1, 0xf4, 0x6, 0x7, 0xffff, 0x8ef2, 0x6, 0x1ff, 0x4, 0x1, 0x6, 0xffffb78b, 0x8, 0x9, 0x5, 0x3ff, 0x3, 0x401, 0xfffffffa, 0x6, 0xd, 0x5, 0x0, 0x80, 0x6], [0xf, 0x6, 0x725, 0x9, 0xc, 0x9, 0xfffffff9, 0xf, 0x1, 0x7, 0x4, 0x1ff, 0xc, 0xfffffc00, 0x2, 0x6, 0x4, 0x4, 0xffff7000, 0x2, 0x0, 0x8, 0xffffffff, 0x1, 0x7, 0xfffe0000, 0x80000001, 0x5, 0x7, 0x6, 0x3, 0x91, 0x4, 0xffff, 0x5fa, 0x8, 0x1000, 0x7, 0x9, 0x8, 0x7, 0x3ff, 0x1e2, 0x9, 0xe, 0xf3, 0xffffffff, 0x3, 0x101, 0x4, 0x0, 0x4, 0xffffffff, 0x4, 0xfff, 0x3, 0x10000, 0x6, 0x5f9, 0xd30, 0x5, 0x7, 0x80000000, 0x800], [0x0, 0x2, 0xe5, 0x9, 0x7fffffff, 0xfb0a, 0x9641b8f, 0x2, 0xe, 0x400, 0x8, 0x2, 0x3, 0x7fffffff, 0xffffff80, 0x5, 0x4, 0x8, 0xffffffff, 0x62, 0x3, 0x8, 0x8, 0x401, 0xffffffff, 0x0, 0x9, 0x9693, 0x1, 0x7, 0x7, 0x8, 0x6, 0x4, 0x1, 0x100, 0x0, 0xac, 0x2, 0x7ff, 0x9, 0x9, 0x4, 0x9, 0x7e24, 0x9, 0x200, 0x4, 0x70d, 0x7, 0x5, 0x9, 0x7, 0x5, 0x5, 0x8, 0x1, 0x1, 0x4853, 0xad4, 0x9, 0xf36, 0x5, 0x2], [0x4, 0x1, 0x9, 0xfffffffd, 0x0, 0x80000001, 0x2, 0x5, 0x6, 0x10000, 0x1, 0x6, 0x1, 0x6, 0xfee, 0x8, 0x7f, 0x4, 0x3ff, 0x7, 0x9922, 0x2, 0x80, 0xe4c, 0x9a2c, 0x4, 0x1, 0x6, 0x7, 0x0, 0x90, 0x8351, 0x1, 0x4, 0xfffffffb, 0x1000, 0x1, 0x0, 0x9, 0x7, 0x30d1, 0x4, 0x3, 0x4, 0x6, 0x1, 0x7, 0x8, 0x3, 0x400, 0xfffffffb, 0x7, 0x9, 0x721, 0x1, 0xa, 0xc9, 0x5, 0x400, 0x5, 0x9, 0xe, 0xd92b, 0x8]}, 0x45c) (async) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8304"]) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000100)}, 0x32) (async) ioprio_set$pid(0x1, 0x0, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000000)=0x790fcafff928631d, 0x4) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r11 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0xf, 0x9, 0x1, {0x22, 0xe48}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1, 0x66}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0x0, 0xfb}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x3, 0x9, 0x53, 0xff, 0x30}, 0x191, &(0x7f0000000180)={0x5, 0xf, 0x191, 0x4, [@generic={0xa5, 0x10, 0xb, "9c724401bf594910904e435563a271c26600fe876c3ee9e532f72a1bd75cfc339743aedc829b928f558006e02629e7cacad0f49622a08d59365b27fe4a8aba79b4a74870e6014362be8ba1f80d88f93f937603c90225ef3ede08ffef301bc77b75773ad2c63747b2cecc4e776217f18586f9e02123844adf0c08307d4fe1dd6d2f0703d25bda3497e1867546e48eb2d8fdc22a7b9fdc6e36edaad443c6212e699d30"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xc1}, @generic={0xda, 0x10, 0x3, "3c05b385d78f50d30be4faac008f616dc5a11dc046b83c3b28364ef2c4432756e6532f7134d545327df502f3dada985e638b4ba0d02e28374108556481ef09e8c22a48645c21588e244dc4b6de571aa8e296f3a123eb72161cf47fcd155de74b13a83ed7285d912dc166e95ca61beca1313a6dd8d69822a9c7af5779ec2de22ba43451edf4b940b5bfb7e4ab46d60e9c051d50cee160a14f3afec4fc21c73bce2623c3cfc76c99956049185a0e84f6aeed47248124457ce22169a42c5c49ac95bbb399ebf3312b633859fa707f0a65d4ef07e3d01e1fdd"}]}, 0xa, [{0xc2, &(0x7f0000000340)=@string={0xc2, 0x3, "3f7c0efcd3681f3883a5e3e195b4fc087cba4906ee7b7977501dc80a0cff907f796fec454e4fe4b573e46c8d388bdc2b86f47b53f9914ff6cc84a33a932a99b356399a7388d551ec491d0134206ea7ec5e5927212065fd500db1419d511838c3f8e22ebaeb920bfe3c1d14609a32cf0ebd14c772c2be546eef93474e5cf378478e50d85a40e9e020b715c39084e4aadd1d872490ccaf791c5a4d5407f010d7110c56aa99e57518f516a85915b55e99dc902d10d2e240a796eeb31289c64f0627"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}, {0x3d, &(0x7f0000000480)=ANY=[@ANYBLOB="89493aae3d034d9e8a356cf5ee18f9233702bd6672ab4a082b24b6c91f3b35aede78b718181847e50a3b58c4cc2ba624e1a36b5ae15cda326fc5f7e49c"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x420}}, {0x79, &(0x7f0000000500)=@string={0x79, 0x3, "ddaeb5fb6f97d67849e05a0b4adc2a9364804b80ded23b8c74755a9874a113e91908c1fdc850c9b27d56e888cfbfa0241a1251726a832d2bf75479726b61117180d56df71c5bc8dc2606a42f8370931c05aa023b25d10daf06bf30a74a4d3ab80602f2093e548d594fa7aa06d380883734d9cff3497903"}}, {0xd6, &(0x7f0000000580)=@string={0xd6, 0x3, "fd3f665333579f78d7f0bd9dfb5daa26d8f451ecc7d3d66f2145de0be4fc21aef19f7fd1fdf304b1eca5b50e253016e8233ee09a1e0ac21bcc9a15d3fc2ba403b8474237d68a06e47e1a525b16520d413ac864bb7fb53a0a4cff4436df41948ecf3d77c9920d126f3a27d6e019e68feeb13bf0acb993d1b0f90dd2789c605d4f9a9c90f126aaa22b727729977c645160463c717fcb15dacf7c363ebdf93b19a8c7a5df3d73acbe8fd0778dbf82b0f6999f1556c37c8e45650aaa5d0c7d4b694919b332f8fa1f8b915bd73f72350ec772984f7e60"}}, {0x56, &(0x7f0000000680)=@string={0x56, 0x3, "e905182f31fb5e894912640547180d27bd842bbf89297d104d6f55593a49867b61f583a2dc3e051a8f7260b914145f5fc36e9c7395c76c10b0a17afa7dcc0af6b2716345734d4af343da29715b6fbf34c84866ff"}}, {0xd, &(0x7f0000000700)=@string={0xd, 0x3, "5f323dd1e935b6fc931b5f"}}, {0xe4, &(0x7f0000000740)=@string={0xe4, 0x3, "5206389f7acced188030930cd79151999497ff969e2a4fd2943457759245f672c457fd59e89f2a935792719010e6595deedb234467da691f1fc6e5c0bb5632dca6970a50a50a536f62de0adfb5b943f64c02ad2656412cd2a2d5ebf788039ab3a7ade5c6a6ebc004f2c99f6d417b5fadc5f2cfd004f33ccbf9c47f5605779bc90fe0851f911b415a700cde116c7cd82dc6244c22f8efdfbbf31eee3653f5b4f46194dd1ccf3e65dc878581db907912566ad4263df869c8648d068fbfb734fe831684ef833f72420a8344b2bf362033268dea4f1385d32665d2ca469bc86ae940de7c"}}, {0xb3, &(0x7f0000000840)=@string={0xb3, 0x3, "533901130e3a3f6c79f17977b46e45760571fb599a5616053012f379ac6cf6d7eb28bf3be8a8b9f048db342586c0d7afa5bc0cc9aa97844dd57d97d3fd52c9f5cac8a985f1f571efef1d4bb8a9ea20bb7699b49d717d740c07074f8e5bf4425ade1a0cc47cf4e5ec6c1bffe577a56eafcd6e3cfdf3dddce15e47af9444e4fce1471151bd28460eda10dcee7011a0455b25cb50f20dd64d820fee7d026a98631206ac06219b5f6fec07897a4ad131d824ed"}}]}) syz_usb_control_io$hid(r11, &(0x7f0000000bc0)={0x24, &(0x7f00000009c0)={0x0, 0x30, 0x5a, {0x5a, 0x7, "6b4886b3b847143b9d055de7e4183558bec43fd4cc92bb1d0fb464b0a428583404934f42682a98232cdab2ffceb8a8152ea2be3d82897c40401d470ea45eb7c1aa09b9d1d6325cd92dfa726a13076823062c3d6c3bca033b"}}, &(0x7f0000000a40)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "842c2f808559df3f83406063cf06a7405e6789b5bf8a85f7f5636aa7863fd4eb0f057f7a661d2c4bb9e52e394df8d09500c17a1be83769be39e36126e11a458f7bab61fc0370ee5659366681cb2cde7811dbae27241d95161bbe223885f2715cc84d9fcf0acb6f2d7bf2deae2ae30f4bb3dc45a832ba8b054cd433ecc9fa406fef7d5ec1821ebca7e0fecaa046d272cc322573ebe157b6a2c8ad21859a763c2c9450cf5e5d950ff1c4262a75880a7f767434e01a63d0894d6ceec22064ac48a7e90bfef82c05ba347a57aeece0b857ed6f221db35a99c7dd313a79a84b6cce4028"}}, &(0x7f0000000b40)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "88ca"}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xa02}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000c00)={0x20, 0x16, 0x6f, "c9d4237ec21232bf3f3c8ddec29ac54fe60e79e94ae2ab3b75f5abb81e834dbaba0c13fa51e1cfc6162f88168c976140ec397323cf01d4895628a3e2afb35a159427914a017604fb5219761f694caf13eec204c9a0d11696d0dd0edef150e4a8f85ca11718d41749678f1944ab13c6"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000dc0)={0x20, 0x1, 0x33, "dcd6eab6b7088543cb5e9a7643b813ca85ce67ac844ad92391bc327ca79349eddc153d77b255cbacb8c8f88fbe1e369415f69a"}, &(0x7f0000000d40)={0x20, 0x3, 0x1}}) (async) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r12, 0x125f, 0x0) 5.020758652s ago: executing program 4 (id=765): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x410}, 0x8000) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)={[{@huge_always}, {}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="021180021500000026bd7000fedbdf2502000a004e9a00007e2a0000000000000100140081000000100018001008acac2626ad"], 0xa8}}, 0x40000010) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) rt_sigtimedwait(&(0x7f0000000040)={[0x9]}, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x8) socket$packet(0x11, 0x3, 0x300) 4.905580213s ago: executing program 4 (id=766): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x54, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400}], 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x21e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf6, 0x50, 0xf7, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x26542e95f2a71388, 0x4, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x2c1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xd2, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x2, 0x80, 0xc}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x9, 0xf, 0x3, 0x8, 0x8}, 0x3d, &(0x7f0000000080)={0x5, 0xf, 0x3d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7, 0x2c, 0x4, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x9, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x5, 0xf00f, 0xf781, [0xc0, 0x1fe00c0, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xa, 0xb, 0x77b}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x36, &(0x7f0000000100)=@string={0x36, 0x3, "495254b89056276ac23e4046cdf3012e1c72ecfbcdcf410d6574ba3584462bf98749884279170ba05761eedca570e9b71e1d64ef"}}, {0xb3, &(0x7f0000000140)=@string={0xb3, 0x3, "f3803d4e1791f156cff72a7a85c22efac8914d8499f597b764d11ee667baec0b3a82e3bbe1c3d25cf7781c185ea8653d6ccb78583303e047eba880be5136343b0afdbde34a4846676d2b25b419858940becefdfc21ac0bd611bca89beb3d2b77fc2ff841e225dc862537de5bb0b82a0d2df5110b41877fc791c314159ef265b36094779fe6d566ae5aee09d65db93ef0abbd788c07d34cac362170ab470f650f52d04ceac5b0eb3b7a17cadd6356c8c606"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xecd7}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1449}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x380a}}, {0xae, &(0x7f00000002c0)=@string={0xae, 0x3, "1db0869850674264272a7591d2005ff7cfd3fc99c2f043e39471250f61edc15bd32953032f51a1d2bb4484e736c3300341529d08153b5c4fbd618fa05e45c48a9517b4ca56975b3ae14892eec0fda9638bddd0be6c891f0ad9e7fd44f9607dbb1df731c2f9fe104114d90835ce92e7e73b661e15df465dc62254f5dfdb9d91225d511ba50a83ab306279f631c4e5391e15c713d186663e92ed07d13d16d4a8fb7e5f8f3b8127bd0e494baec1"}}, {0xe2, &(0x7f0000000540)=@string={0xe2, 0x3, "edbd987496368d3aea407eca0ddbe183b2e33e984830a4fa505f188f8324f7334f85c51f46c41f57a93e156b4591c0ca8f17042446743598c33bbfaab2e705cff9d767890b05b468e2aa278ff41dcd49fdc61de0c722ac64ade49f93bc20b62e7bf01741bb7f01a3c8804233c00ffbc2343f66a817928617e39efc8b32332131b5fea10ed90d6374639689ba72e50ee94bc90590dcbe85aea375f1e5c8c90702cadbe4a7cc85b3ce27dd15612fcd621d1dc16117e9651169921c60144f9ab8dfa9fa9da1abb11c2ea504263c68168567258a7eb006351555f09cd9b70ed56622"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, &(0x7f0000000640)={0x20, 0x8, 0xf9, {0xf9, 0x22, "a8d6a4e35eb6ae066579a353417474d693931bc812668e089ce4f50b9a031cd108e1bafda3b9609e5904534d9ab081ae05eba31f4260a3eb4b56bafa20262b9168eafbcde9563505efcd9552bfb5dc9a598ca30e05f9acd9d9b21065479a4798bd3cefb95fa271b808e1cde5c98bc18acdf02d7358cdd5582caff9cc73867b66b6c72df6fa196ea5e398fc87161d9ca8bb5b6905cb3e68dcd728e5b37a1ed4c1f245986f537d716995080efcde374c01154834c40b63cb361891b2fc0a25b35174350f0ee9daf99c6ee8628fc532f0195a24082d49a6dab82bc10210f68c09fdfeccf24d83d8722aec5dff981ac7bac29293eb6284d2b6"}}, &(0x7f0000000740)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "5ffb3923ac41a798fcc9c6e037a1adc732aa99d28f1560c3ed389eac4b5fda210e5f6ba5988d912c09273f973e6a76dcf3d66a3ae6e72718c3c60d557e34a1e56ff7019c530f6f4e4fa4d99a1d0f3bf41836ee3e63ef503a60d65d064306a13e4e3d156cd6dab3601d4f455b9aa94116c43557df0d53737df449e2f08315bcae697b6f00221621d16ea92dede7afd3f1ffc20c4085fd8c4c4ea3588311292abc52a534a1cd02d09e9d8e7a2887890fea8274f53b4bfd"}}, &(0x7f0000000380)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0x3530389994ded67e, "45dcfd69"}, @local=@item_4={0x3, 0x2, 0x0, "d5b2692a"}, @main=@item_012={0x1, 0x0, 0x8, '['}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffa, 0x7f, 0x1, {0x22, 0xd5c}}}}, &(0x7f00000009c0)={0x2c, &(0x7f0000000840)={0xc0, 0x6, 0x68, "5271102848a865050004d62ad71ecb78c65b6623a6db42666f10e5506bfbea787b712d7f54fec09afa9300b8590847443eae5aaf2c66d3a781fc441860e8eaec1d3c6db463e70d8d090708dfd9edad90d158cb9dedba4a3cdf5bb01a07971407d2aef00eddc380e6"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000940)={0x20, 0x1, 0xd, "3f8fb4dc19e0065fc0c8511636"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0x1}}) 4.573620279s ago: executing program 3 (id=774): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async, rerun: 32) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xfffffffffffffffd) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) 4.51896404s ago: executing program 3 (id=776): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYRES16=r0]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x7, 0x560c, {0xfd, 0x5d5}, {0xfffa, 0x2}, @period={0x5d, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x7, 0xfffb, 0xa20}, 0x0, 0x0}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xd, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) 3.025861093s ago: executing program 3 (id=784): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast1, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800153f00000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) io_setup(0x8, &(0x7f0000000340)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/98, 0x62, 0x1, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/4096, 0x1000, 0x0, 0x19}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_handle={0x77682a85, 0x3000, 0x1}}, &(0x7f0000000280)={0x0, 0x1, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2.857281725s ago: executing program 3 (id=794): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x11) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0xfffffffe}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) write(r3, &(0x7f0000000240)="1c0000001a005f0214f9f407000904001f0000def6cc930200000000c50ce9e3840c4f075c04f86919408be1ebc422306fce2d72e780df5e3c22b94384b97b45d714b0e1cd321a436de9d554af993e98e80434e8bb49cffd57c532385eda7d00eb53ec449b5bfc6beee53ffc364d882863f07013e2830e2e5bddd52b045ce5fdfa12290e2bfe3096da677ffabe0704811d98b3807064b9c8a08200faa5904ee9e7543c0700000000000000", 0xab) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r8, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0xab6}}], 0x18}}], 0x1, 0x8801) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, 0x700, 0x80, 0x9, 0xfffffff1}}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x6, 0xc, 0x7, 0x7, 0x6, 0x7b, 0x7, 0x9, 0x7, 0xbe, 0x1, 0x8, 0x9, 0x97, 0x9, 0x5}}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x2, 0x0, 0x0, 0x6}}) 2.650959708s ago: executing program 3 (id=795): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "957968d3c0f443e972b9d723b2865bed4fb32162005aa91192e61d4668d960da62c8486e30f4b269944aa86d0fc98dc32a905b1437ea3628b522a4cb4389b610", 0x20}, 0x48, r1) keyctl$unlink(0x9, r2, r2) 2.650108788s ago: executing program 3 (id=796): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$FITHAW(r1, 0xc0045878) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000740)={0x4, 0x5, 0x0, {0x0, 0x6}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000100)={'custom0\x00'}) ioctl$FIOCLEX(r2, 0x5451) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1205010226a60908a607c207123701020301090212000109f9100409043300006faa0d00"], &(0x7f0000001440)={0x0, 0x0, 0x5, &(0x7f0000001080)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000040)="15ca60ac578d2cb1450146d54d12bd3bbd03abf70f876dc30cd4b49e6692", 0x1e) close_range(r4, 0xffffffffffffffff, 0x0) 1.958303729s ago: executing program 2 (id=803): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) linkat(r1, &(0x7f00000001c0)='./file1\x00', r1, 0x0, 0x1000) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0xc000) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001780)={0x1d8, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "5697e9541ba3e32d5757328ad3160aec74d252d59182e82ebb06568cadc5217b2b126120b09eeb8e56dba577fd6ae0b8001c84a9dc522f622473f9640017ecb694e3af674295c89233feb3156ec4bbc6f4586e4de4bddbe6a767d9e12f620e3dbe6c2662c3fabc7b5c7f2bb594d3eef0def0f5a3a8f482c075f2cd02c72d7ceb3236c6279b1159d9b0b4c0722e1c"}, @TIPC_NLA_NODE_ID={0xaa, 0x3, "7ebc34dbaf352bb32b69ddca0eb63e3375714a62bc0535c2efeb1e45a0ed4998d1c4427c5351364464ead92e339b319b9b5627bf8077e34b79d51b0884fa6e6b2aa3dc8b27aaf5d26a3729cf64c06e964621044100fe3a6b0450270dfe4f24736ef5238f5eb71ed725dbb1d6b925cbaa00401897355dca54b36951ea2f22428995f1df35c2fbe01bdf18697294f87e9c1531cdc9703df94336b876b5bde25f7fd902d3f28443"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "70c8d3940f6186b37d0375567e311a0d3422293abca5d9b2bd649cf5b0828ee1f35510"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2805}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x4, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x38, 0xe2, 0xaa, 0x8, 0x2b73, 0x17, 0xa20e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0xdb, 0x4, 0x80, 0xe6, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0xff, 0x9e, 0x4d, 0x5}}, {{0x9, 0x4, 0x0, 0x2, 0x2, 0xe2, 0xa5, 0xc6, 0xa, [], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x10, 0xf8, 0x7}}]}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x95}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8000}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x4811) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) chdir(&(0x7f0000000300)='./file0\x00') close_range(r5, 0xffffffffffffffff, 0x0) 1.671340844s ago: executing program 4 (id=804): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004020100600000000000001090224000100000000090400000103fc2253cf2100000001220700090581030000000000"], 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="40100a0000000000006c32155d690f22929ede30807e17c50f91b5030e1c3ad9720a13ba4f5d7fb240bd7c25fc84be2e2ad470cd38d92beadeb5fba20e95f1927eb72f740e073d077aafe7f12f88c6a5968bf4b0bd881a59ea2f40e647c2d27d09ea4f2875a54ba80fedc2674c5fcdc391d2327d711256170351193e1c105fefaf49a3ce2ca9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x298040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r9 = syz_clone(0xc002000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r9, 0x358, 0xffff8881f6e281a0) (async) ioctl$sock_bt_hci(r8, 0x800448d3, 0x0) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) ioprio_get$pid(0x2, r10) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.29064264s ago: executing program 0 (id=805): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYRES16=r0]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x7, 0x560c, {0xfd, 0x5d5}, {0xfffa, 0x2}, @period={0x5d, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x7, 0xfffb, 0xa20}, 0x0, 0x0}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) 765.862388ms ago: executing program 0 (id=806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast1, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800153f00000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) 764.110408ms ago: executing program 4 (id=807): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) ppoll(&(0x7f0000000140)=[{r0, 0x2004}, {r0, 0x8026}, {r0, 0x4000}, {r0}, {r0, 0x2106}], 0x5, &(0x7f0000000180), &(0x7f00000001c0)={[0x5]}, 0x8) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0x8, 0x7, 0x2, 0x1, 0x1, "f7f90e1e46da613d"}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000023c0)={0x18, 0x0, &(0x7f00000022c0)=[@decrefs, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x3}], 0x92, 0x0, &(0x7f0000002300)="481c8f00c9ef80a7a48a4fe85119b56cb4776d0aa078e5ef04e8842049ab467a88545c33882e4561f1a4488f62ff88d2b253bf6dd11ec21cb95640d747320c66ad3ebd89b892f8bef17fc31fc86d7445be11b7bf1ceabe83a7cc8481878fad20d50521cc1d0e2f52590fbe24ee9cd86b252582ddb6a485ef666fb337c611c274b165b95eb4f911079e508fcbea2d4772b9a7"}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) pselect6(0x40, &(0x7f0000002400)={0x200, 0x6, 0x9, 0x0, 0x200, 0x6e91, 0x200, 0xd}, &(0x7f0000002440)={0x6, 0x4, 0xbd5, 0x8, 0x2, 0x4, 0x40, 0x9ea7}, &(0x7f0000002480)={0x1, 0x3, 0x3, 0xff, 0xa, 0xd7ed, 0x5, 0x80}, &(0x7f00000024c0), &(0x7f0000002540)={&(0x7f0000002500)={[0x401]}, 0x8}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000025c0), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000002680)={&(0x7f0000002580), 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000026c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000002ac0)={r6, 0x40, 0x0, [0x32da, 0x8, 0x101, 0x6, 0xffffffffffff5460], [0x3, 0x309b, 0x3, 0x44, 0x8, 0x5, 0x4, 0x80000000, 0x5, 0x7f, 0x3, 0x3, 0x5, 0x1, 0x68f, 0x9, 0x7fffffff, 0x7, 0x2, 0x32ea, 0x8000000000000000, 0x5, 0x401, 0x9, 0xf45d, 0x2, 0x9d25, 0x5, 0x4, 0x7, 0x3, 0x6, 0x7, 0x5, 0x1, 0x8, 0x0, 0xf433, 0x7ff, 0x1, 0xfe, 0xd46, 0x2, 0x8, 0x5, 0x200040000000, 0xf14c, 0x4, 0x3, 0x8, 0x2, 0x0, 0x4, 0x9, 0x2, 0xfff, 0x3, 0x8, 0x7b7, 0x77fd, 0x2, 0x845, 0x8, 0x7dd3, 0x3, 0x0, 0x9, 0x80000000, 0x56, 0x1000, 0x7fffffffffffffff, 0x7f4, 0x2, 0x9, 0x4, 0x6, 0x0, 0x8000000000000001, 0x0, 0x585, 0x4, 0x98, 0x6, 0x3, 0x100000000, 0xffff, 0x3, 0x4, 0x0, 0x0, 0x0, 0x13, 0x1, 0x9, 0x4, 0x5, 0x10000, 0x80000001, 0x200, 0x10001, 0x3, 0x3, 0xfffffffffffffff8, 0x1ff, 0x9, 0x6, 0x0, 0x5, 0x3, 0x2, 0x6, 0x1, 0x4, 0x100000001, 0xffffffffffff84c1, 0x100, 0xffffffff, 0x10001, 0x2, 0x4ae5, 0x9c1]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000002f00)) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000002f80)) recvmsg$can_raw(r0, &(0x7f0000003700)={&(0x7f0000002fc0)=@nfc_llcp, 0x80, &(0x7f0000003580)=[{&(0x7f0000003040)=""/9, 0x9}, {&(0x7f0000003080)=""/104, 0x68}, {&(0x7f0000003100)=""/172, 0xac}, {&(0x7f00000031c0)=""/253, 0xfd}, {&(0x7f00000032c0)=""/87, 0x57}, {&(0x7f0000003340)=""/49, 0x31}, {&(0x7f0000003380)=""/238, 0xee}, {&(0x7f0000003480)=""/253, 0xfd}], 0x8, &(0x7f0000003600)=""/208, 0xd0}, 0x40000040) write$binfmt_aout(r0, &(0x7f0000003740)={{0x108, 0x0, 0x4, 0x225, 0x4c, 0x6, 0x235, 0x40}, "e58bb90374a36160d1251e3dd827e881222de2287c61d64997dceba5409dfb1d71a0a0831d2679e0e9603d52f4204e3dff52fc0aeb9fb405ee633f4c5713c6d87ed480513c772b295b764a2bf730d7988e18ef582e4ab0dd9ebbd6016caebe43349c0d69eb5e6cd363", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x789) recvmmsg(r0, &(0x7f0000008b40)=[{{&(0x7f0000003f00)=@nfc_llcp, 0x80, &(0x7f0000004380)=[{&(0x7f0000003f80)=""/136, 0x88}, {&(0x7f0000004040)=""/10, 0xa}, {&(0x7f0000004080)=""/43, 0x2b}, {&(0x7f00000040c0)=""/251, 0xfb}, {&(0x7f00000041c0)=""/163, 0xa3}, {&(0x7f0000004280)=""/218, 0xda}], 0x6}, 0x9}, {{&(0x7f0000004400)=@generic, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/108, 0x6c}], 0x1, &(0x7f0000004540)=""/222, 0xde}, 0x3}, {{&(0x7f0000004640)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004700)=[{&(0x7f00000046c0)=""/47, 0x2f}], 0x1, &(0x7f0000004740)=""/38, 0x26}, 0xf}, {{&(0x7f0000004780)=@ax25={{0x3, @netrom}, [@netrom, @rose, @null, @rose, @default, @default, @bcast]}, 0x80, &(0x7f0000006900)=[{&(0x7f0000004800)=""/108, 0x6c}, {&(0x7f0000004880)=""/125, 0x7d}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/4096, 0x1000}], 0x4, &(0x7f0000006940)=""/144, 0x90}, 0x3245}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006a00)=""/178, 0xb2}, {&(0x7f0000006ac0)=""/177, 0xb1}, {&(0x7f0000006b80)=""/28, 0x1c}], 0x3, &(0x7f0000006c00)=""/229, 0xe5}, 0x4}, {{&(0x7f0000006d00)=@phonet, 0x80, &(0x7f0000007140)=[{&(0x7f0000006d80)=""/46, 0x2e}, {&(0x7f0000006dc0)=""/199, 0xc7}, {&(0x7f0000006ec0)=""/109, 0x6d}, {&(0x7f0000006f40)=""/45, 0x2d}, {&(0x7f0000006f80)=""/206, 0xce}, {&(0x7f0000007080)}, {&(0x7f00000070c0)=""/41, 0x29}, {&(0x7f0000007100)=""/3, 0x3}], 0x8, &(0x7f00000071c0)=""/56, 0x38}, 0x3}, {{&(0x7f0000007200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007280)=""/63, 0x3f}, {&(0x7f00000072c0)=""/103, 0x67}], 0x2, &(0x7f0000007380)=""/190, 0xbe}, 0x7fff}, {{&(0x7f0000007440)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000007740)=[{&(0x7f00000074c0)=""/141, 0x8d}, {&(0x7f0000007580)=""/239, 0xef}, {&(0x7f0000007680)=""/178, 0xb2}], 0x3, &(0x7f0000007780)=""/11, 0xb}, 0xfffffffb}, {{&(0x7f00000077c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000008a40)=[{&(0x7f0000007840)=""/67, 0x43}, {&(0x7f00000078c0)=""/63, 0x3f}, {&(0x7f0000007900)=""/143, 0x8f}, {&(0x7f00000079c0)=""/4096, 0x1000}, {&(0x7f00000089c0)=""/82, 0x52}], 0x5, &(0x7f0000008ac0)=""/121, 0x79}, 0xc}], 0x9, 0x40000022, &(0x7f0000008d80)={0x77359400}) r7 = eventfd(0x6) close_range(r0, r7, 0x2) sendto$inet6(r0, &(0x7f0000008dc0)="ce8723a17a4c75841cbd5711a81659786b9d29b349a77288b36da70e3b", 0x1d, 0x44000, &(0x7f0000008e00)={0xa, 0x4e20, 0x1, @remote, 0x8}, 0x1c) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000008e40)=[{}, {}, {}], &(0x7f0000008e80)=0x18) write$FUSE_INIT(r1, &(0x7f0000008ec0)={0x50, 0x0, r2, {0x7, 0x2b, 0x10001, 0x30008040, 0x7f, 0x400, 0x4, 0x8, 0x0, 0x0, 0x4, 0x3}}, 0x50) syz_io_uring_setup(0x4971, &(0x7f0000008f40)={0x0, 0xd5a8, 0x20000, 0x2, 0xba, 0x0, r0}, &(0x7f0000008fc0), &(0x7f0000009000)) write$FUSE_INIT(r0, &(0x7f000000b080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffff8, 0x2, 0x4, 0x508c, 0x9, 0x6, 0x0, 0x0, 0x4, 0x10}}, 0x50) 725.772158ms ago: executing program 0 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303033373737373717373737372c00"]) setuid(0xffffffffffffffff) io_setup(0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000040)=0xdebb, 0x4) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x6}, 0x1c) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000680)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x8, 0x2081) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x40000, 0x0, 0x0, 0xfc}) r7 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r7, 0x0, 0x14, &(0x7f00000001c0)="02000000", 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') 627.05901ms ago: executing program 4 (id=809): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}]}]}, 0x70}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80082103, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000020000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) futex(&(0x7f0000000180)=0x2, 0x7, 0x1, &(0x7f0000000280), 0x0, 0x1) (async) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) fchown(r2, r4, r6) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0xb5bc40808908ed1) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5d2d0b11b36aff97, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) (async) close(0xffffffffffffffff) (async) close_range(r8, 0xffffffffffffffff, 0x0) 568.451201ms ago: executing program 0 (id=810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r0, 0x2b09d000) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "8ecc5bc4480cfc9f", "a51fa6f7b9575777b36ada92c5f1a1a9", "5badaf7d", "6fe76482a0a716bc"}, 0x28) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r0, 0x2b09d000) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "8ecc5bc4480cfc9f", "a51fa6f7b9575777b36ada92c5f1a1a9", "5badaf7d", "6fe76482a0a716bc"}, 0x28) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (async) 556.943681ms ago: executing program 0 (id=811): r0 = userfaultfd(0x801) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000200)={0x2, 0xd3e, 0x389, 0x0, 0xe}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x32, 0x9}}], 0x18}}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c01c1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000140)=0x80000000000000) setresgid(0x0, r8, 0xee01) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x9, 0x1, 0x1e}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 462.945663ms ago: executing program 2 (id=812): sendmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)=[{0x38, 0x10, 0x7, "d5c93a304fa293e647a110101daa6c747d1c35c7f5dea70c8a3fb8e29faa3de0db"}, {0xe0, 0x10f, 0x3, "dae6f9f8d474147c0eb355c2f5b0e0b7fb2986c614964c5c6df193aeef6f878ffe47caed9087f3246e1bfa772c1380e32e7752a6d318cb2bdd51d63500d4d0488ce3e56506c74782500dab25b33b10cc7117c7bb990dafc7a9529e53547ef739ade176319b9fd6b5759ea02512369a8ddff9bbfc9b3d2d801d6b0307e987a5d04cfbfc24770df5592601012a525b3aab8877677668be3617e74b5c52675def400a6c401ba22d6ee4a4ad62bbb02fc247a53e81333a85c1fdf876482846773a5c68164fad3b67bf533d"}, {0x88, 0x113, 0x9, "3c1536b617c5d37929809d77688e88e6469e49b467aedf00841699ca096f541ada01766345d2c9ab54e9f3774b4c7ead0d4430b5ab0cb642e0d67f4d00c53501bae2d28403388873a88d891fd92969f90b3089b0f41c5d91b1870d903480fc38fc53d5880b517619a61026fbd404bd28a9710dbc"}, {0x60, 0x0, 0x7ff, "cc96f15eb05ece52bdd1da7e883bf71e2284197a7da82a8e834c4148226f7f5b4d9a64500c7dd82c013ff3bfae6a08bf8512f7433c261ea234e0421e50ef8818833239438251751d1c"}, {0x108, 0x1ab, 0x80000000, "cde15cabcd1768b74edd48902b40f04c1cfd48364eacc49ca86cadaad6dd194473e46ae6b3facf52d8195b4e1f84edae6c83f0c471d652d2a8f0c070993defa4b918adbacd41beea1ba536f3d39481a76da4a7fe234022e68c5e80e81c82e82615130f5dd2d3ec77b0d6fe5e58bffeadb008b63beb64f959cc72b8c34b206f667a397a17b59cfe2e115224878f2e191a7438dfd8a791b66330dceaa316299fef7b0e98beeb29818d0d84f2b27844875651a39e8e8ba13f6859f8d983e571cae5a8e8b1d07389010ca7725871ddc83c47dd9a56c4c778d0efac507ea7120b8ada485a96ba12cc1385b3028799e70a66d340"}, {0xe8, 0x101, 0x80, "be6839e28fc1be52bba209e86e6b8181bd04b2f6964798452b686d706988004f20d65195e8a369d121e3d3726a75e694380e347adb4f80d2b6deba0495b8df432ccfc693dc1531db12c6abd449677a696bfc03068f5926692e59557ea0e3eccf459a7a7f4ea3ad2e2384413c63e7bd88c10de2f0e23201cd1d628e5f322644cb71a27bbf2c469b3961c288fdef618019606a03ac0d11d73b205937886f8e13e14f0bd6882ddc30d3968e75eb6d291bddefa1d48d445064c832c5444c8b535d81600fa577f1cda0660c054af34ea2f3e15a24"}, {0x80, 0xff, 0x8, "9a4f842266c5f68fcd0ee08e98700308c7cfffb17e6da5570cc14d551d0c2bb40796d222a0805ec056ddda72f7724db4503c116471120eff9add118943bb06e6d2c9818b2297868b04dad37630ef9af8925dfc70371d84acf072d35b8beea81fd8ba5fa998f80b129fc8863200"}], 0x470}}], 0x2, 0x48004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0xe4, 0x0, 0x32a, 0xfffffffffffffffb, 0x2, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) 459.678383ms ago: executing program 2 (id=813): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', '', [{0x20, '-+}'}, {0x20, '\x86\xc1\xc2\xde\x17\xd0\x14\n\xcc\xab\xc8\x8e\x02\xbd\x96K0\x91\x06gx7\xb2!\xf8ND\xfa\xf5\xd2pY\xc2\xe9\x9c\xdd\x02\xc2:>b*s\xda-g\xfd\x9d\xef(t\t\x17#\xd1d\xbfU\xf8Z\x94[\x88M\xc3\xe6\xde\xc1\xb4\xdb\b\x1f\xc2h\x8d\xd8>\x81V{/\x13\x0f\xd9{}{A#\x87l\xb8\x9et\xa3\x04\xaf(@\xe4\x1a\xba\x93\x9e9\xda7\x18U\x02FW\xfa\x96\x88\x17\xe6J\x9cG\x9d\xd2\xba\xcd\x9d\x0e3\xde\xb3\xac\xe1\x9e\x93\xa3\x14\x1d\xe0\xe2\xf5\xa0 R\xdck\x13\xb3u\xf2\a\t\xa7\xd3\x13\x16\xe4\t\xf7\x98.\xcc\xd15\xdfB\xaer\x83\xb3GW\xf9\xfbqR\xd3lPlU%\xf0\xa4\x9eZZ\v\xc3\xed\xfa1\x99_t\xb45\x80iO&\n.&\x97\xda\xd1k\t\xc6\xb5\x9b\x92\x1a\x10\xd89t{\xf1\x17\xd2F\x00'/232}, {0x20, '\xfbq,'}]}, 0xf5) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x10012, r0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r2 = timerfd_create(0x8, 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r8 = openat$incfs(r7, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x40106726, &(0x7f00000000c0)) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) fcntl$setownex(r10, 0xf, &(0x7f0000000140)={0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x4, 0xc3, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x66, 0x0, 0xb, 0x29, 0x0, @remote, @remote}}}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x9, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) setuid(r4) timerfd_settime(r2, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) 0s ago: executing program 0 (id=814): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYRES16=r0]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x7, 0x560c, {0xfd, 0x5d5}, {0xfffa, 0x2}, @period={0x5d, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x7, 0xfffb, 0xa20}, 0x0, 0x0}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) kernel console output (not intermixed with test programs): rity_context_str_to_sid (unconfined_u) failed with errno=-22 [ 37.521458][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.527051][ T45] usb 2-1: config 0 has no interfaces? [ 37.534641][ T45] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 37.543735][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.551819][ T45] usb 2-1: Product: syz [ 37.556015][ T45] usb 2-1: Manufacturer: syz [ 37.560623][ T45] usb 2-1: SerialNumber: syz [ 37.566000][ T45] usb 2-1: config 0 descriptor?? [ 37.675221][ T307] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 37.776020][ T9] usb 2-1: USB disconnect, device number 5 [ 37.804544][ T573] can0 (unregistered): slcan off ptm0. [ 37.826346][ T307] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.836826][ T307] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.846065][ T307] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 37.855419][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.867717][ T307] usb 1-1: config 0 descriptor?? [ 38.259258][ T45] usb 3-1: USB disconnect, device number 5 [ 38.472004][ T650] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 38.474498][ T651] rust_binder: Got transaction with invalid offset. [ 38.481841][ T651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.488548][ T651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 38.512075][ T654] x_tables: duplicate entry at hook 1 [ 39.435215][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.586347][ T31] usb 3-1: config index 0 descriptor too short (expected 24524, got 36) [ 39.594779][ T31] usb 3-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 39.605160][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.607275][ T613] Bluetooth: hci0: command 0x1003 tx timeout [ 39.611529][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.631773][ T31] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 39.640886][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.649702][ T31] usb 3-1: config 0 descriptor?? [ 39.655735][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 39.675828][ T671] random: crng reseeded on system resumption [ 39.705216][ T368] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.845202][ T368] usb 2-1: device descriptor read/64, error -71 [ 39.871923][ T677] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 39.871946][ T677] rust_binder: Error while translating object. [ 39.884203][ T677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.890498][ T677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 40.085233][ T368] usb 2-1: device descriptor read/64, error -71 [ 40.211117][ T688] tipc: Started in network mode [ 40.216080][ T688] tipc: Node identity 4, cluster identity 4711 [ 40.222360][ T688] tipc: Node number set to 4 [ 40.335253][ T368] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.406528][ T9] usb 1-1: USB disconnect, device number 6 [ 40.415002][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.422289][ T690] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 40.465263][ T368] usb 2-1: device descriptor read/64, error -71 [ 40.505557][ T694] rust_binder: Write failure EINVAL in pid:74 [ 40.705250][ T368] usb 2-1: device descriptor read/64, error -71 [ 40.826571][ T368] usb usb2-port1: attempt power cycle [ 40.833300][ T704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.988329][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 40.999445][ T716] random: crng reseeded on system resumption [ 41.026863][ T716] netlink: 'syz.0.116': attribute type 12 has an invalid length. [ 41.165214][ T368] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.186324][ T368] usb 2-1: device descriptor read/8, error -71 [ 41.316280][ T368] usb 2-1: device descriptor read/8, error -71 [ 41.555232][ T368] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.576233][ T368] usb 2-1: device descriptor read/8, error -71 [ 41.706346][ T368] usb 2-1: device descriptor read/8, error -71 [ 41.815412][ T368] usb usb2-port1: unable to enumerate USB device [ 42.214525][ T9] usb 3-1: USB disconnect, device number 6 [ 42.279067][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 42.279104][ T36] audit: type=1400 audit(1751325772.480:262): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.373715][ T36] audit: type=1400 audit(1751325772.570:263): avc: denied { remount } for pid=736 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.394914][ T36] audit: type=1400 audit(1751325772.600:264): avc: denied { accept } for pid=736 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 42.475198][ T612] Bluetooth: hci0: command 0x1003 tx timeout [ 42.475198][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.671497][ T36] audit: type=1400 audit(1751325772.870:265): avc: denied { create } for pid=750 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.693266][ T751] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 42.702171][ T751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 42.735206][ T368] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.865229][ T368] usb 2-1: device descriptor read/64, error -71 [ 43.035213][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 43.041281][ T613] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 43.105203][ T368] usb 2-1: device descriptor read/64, error -71 [ 43.265228][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 43.315877][ T36] audit: type=1326 audit(1751325773.520:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=741 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 43.345218][ T368] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.380134][ T36] audit: type=1400 audit(1751325773.580:267): avc: denied { map } for pid=766 comm="syz.0.132" path="socket:[6002]" dev="sockfs" ino=6002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.383261][ T777] rust_binder: Error while translating object. [ 43.404443][ T777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 43.410718][ T777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:113 [ 43.421333][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 43.445443][ T45] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 43.460591][ T782] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.462892][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.467281][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.485900][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.495071][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.503157][ T368] usb 2-1: device descriptor read/64, error -71 [ 43.509498][ T45] usb 4-1: Product: ꑱ䓬⥭啱銯㦨䶔㝡֢吹饊㚞毞鱽⹰⑜츝탕歌ꀥㄑ䊀Ἷ촭ޕ섮 [ 43.520601][ T45] usb 4-1: Manufacturer: з [ 43.525172][ T45] usb 4-1: SerialNumber: Є [ 43.735923][ T760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.744445][ T760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.755479][ T368] usb 2-1: device descriptor read/64, error -71 [ 43.762015][ T45] usb 4-1: 0:2 : does not exist [ 43.768826][ T45] usb 4-1: USB disconnect, device number 4 [ 43.875307][ T368] usb usb2-port1: attempt power cycle [ 43.915208][ T36] audit: type=1400 audit(1751325774.110:268): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.923672][ T786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.936052][ T786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.957610][ T36] audit: type=1400 audit(1751325774.160:269): avc: denied { getopt } for pid=789 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.195212][ T307] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 44.225246][ T368] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 44.246282][ T368] usb 2-1: device descriptor read/8, error -71 [ 44.273341][ T36] audit: type=1400 audit(1751325774.470:270): avc: denied { ioctl } for pid=791 comm="syz.3.140" path="socket:[6080]" dev="sockfs" ino=6080 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.346307][ T307] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.349374][ T794] exFAT-fs (rnullb0): invalid boot record signature [ 44.357367][ T307] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.363942][ T794] exFAT-fs (rnullb0): failed to read boot sector [ 44.374053][ T307] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.380039][ T794] exFAT-fs (rnullb0): failed to recognize exfat type [ 44.386920][ T307] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 44.402420][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.406259][ T368] usb 2-1: device descriptor read/8, error -71 [ 44.421304][ T307] usb 1-1: config 0 descriptor?? [ 44.436581][ T798] SELinux: security_context_str_to_sid ( [ 44.436581][ T798] ) failed with errno=-22 [ 44.527460][ T36] audit: type=1400 audit(1751325774.730:271): avc: denied { connect } for pid=806 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.621653][ T812] rust_binder: Error in use_page_slow: ESRCH [ 44.621681][ T812] rust_binder: use_range failure ESRCH [ 44.627990][ T812] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 44.633482][ T812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.641478][ T812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:127 [ 44.655263][ T368] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 44.686225][ T368] usb 2-1: device descriptor read/8, error -71 [ 44.775088][ T816] batadv_slave_1: entered promiscuous mode [ 44.781393][ T816] batadv_slave_1: left promiscuous mode [ 44.816345][ T368] usb 2-1: device descriptor read/8, error -71 [ 44.829901][ T307] hid-generic 0003:04F3:0755.0004: unknown main item tag 0x3 [ 44.837561][ T307] hid-generic 0003:04F3:0755.0004: failed to start in urb: -90 [ 44.845795][ T307] hid-generic 0003:04F3:0755.0004: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 44.925313][ T368] usb usb2-port1: unable to enumerate USB device [ 45.515205][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 45.521267][ T613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.110940][ T835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.111090][ T835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:127 [ 46.205476][ T838] incfs: Options parsing error. -22 [ 46.270598][ T839] fuse: Bad value for 'rootmode' [ 46.293166][ T838] incfs: mount failed -22 [ 46.755187][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.947973][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 46.969077][ T45] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 46.977715][ T45] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.979729][ T307] usb 1-1: USB disconnect, device number 7 [ 46.995882][ T856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.161'. [ 47.014986][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 47.031174][ T856] binder: Bad value for 'defcontext' [ 47.036821][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.056748][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 47.080681][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 47.098880][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 47.125620][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.140099][ T45] usb 2-1: config 0 descriptor?? [ 47.249367][ T874] rust_binder: Got transaction with invalid offset. [ 47.249405][ T874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.256337][ T874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 47.336761][ T878] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 47.356522][ T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 47.405209][ T307] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 47.529793][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 47.529811][ T36] audit: type=1400 audit(1751325777.730:286): avc: denied { lock } for pid=885 comm="syz.3.173" path="socket:[7342]" dev="sockfs" ino=7342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.561002][ T36] audit: type=1400 audit(1751325777.760:287): avc: denied { read write } for pid=821 comm="syz.1.149" name="lp0" dev="devtmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 47.562410][ T307] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.585325][ T45] usb 2-1: USB disconnect, device number 14 [ 47.595471][ T307] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 47.604385][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 47.613196][ T307] usb 1-1: config 0 interface 0 has no altsetting 0 [ 47.619536][ T36] audit: type=1400 audit(1751325777.760:288): avc: denied { open } for pid=821 comm="syz.1.149" path="/dev/usb/lp0" dev="devtmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 47.626496][ T307] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 47.662778][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.662999][ T45] usblp0: removed [ 47.678607][ T891] rust_binder: Error in use_page_slow: ESRCH [ 47.678631][ T891] rust_binder: use_range failure ESRCH [ 47.679343][ T307] usb 1-1: config 0 descriptor?? [ 47.685541][ T891] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 47.693358][ T865] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 47.695233][ T891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 47.711511][ T891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:170 [ 47.723685][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 47.740771][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.775787][ T36] audit: type=1400 audit(1751325777.980:289): avc: denied { write } for pid=890 comm="syz.3.174" name="hidraw0" dev="devtmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.799993][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.810930][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.820929][ T65] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 47.830104][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.839534][ T65] usb 3-1: config 0 descriptor?? [ 48.105560][ T894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.116708][ T894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.132715][ T307] usbhid 1-1:0.0: can't add hid device: -71 [ 48.145204][ T307] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 48.166099][ T307] usb 1-1: USB disconnect, device number 8 [ 48.248227][ T65] belkin 0003:1020:0006.0006: unknown main item tag 0x3 [ 48.265357][ T65] belkin 0003:1020:0006.0006: hidraw1: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 48.418470][ T919] 9pnet_virtio: no channels available for device syz [ 48.524895][ T36] audit: type=1400 audit(1751325778.720:290): avc: denied { connect } for pid=926 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.544792][ T12] tipc: Subscription rejected, illegal request [ 48.544890][ T36] audit: type=1400 audit(1751325778.740:291): avc: denied { write } for pid=926 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.590766][ T36] audit: type=1400 audit(1751325778.740:292): avc: denied { read } for pid=926 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.610213][ T36] audit: type=1400 audit(1751325778.770:293): avc: denied { write } for pid=926 comm="syz.3.184" name="unix" dev="proc" ino=4026532506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.692001][ T307] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 48.705244][ T307] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.724027][ T941] fido_id[941]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0007/report_descriptor': No such file or directory [ 48.795676][ T36] audit: type=1400 audit(1751325779.000:294): avc: denied { map } for pid=944 comm="syz.0.190" path="pipe:[7519]" dev="pipefs" ino=7519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 48.863760][ T36] audit: type=1400 audit(1751325779.060:295): avc: denied { map } for pid=950 comm="syz.0.191" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.978430][ T967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.996876][ T968] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 49.003465][ T968] rust_binder: Error while translating object. [ 49.014093][ T968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.020354][ T968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 49.150201][ T986] rust_binder: Write failure EFAULT in pid:167 [ 49.209509][ T990] : renamed from veth1_to_batadv (while UP) [ 49.223273][ T990] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 49.415296][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 49.566277][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.577270][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.587040][ T9] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 49.596389][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.605355][ T9] usb 1-1: config 0 descriptor?? [ 50.015525][ T9] steelseries 0003:1038:12B6.0008: unknown main item tag 0xe [ 50.031146][ T9] steelseries 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 50.285200][ T45] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 50.359182][ T305] usb 3-1: USB disconnect, device number 7 [ 50.383407][ T1018] rust_binder: Failed copying remainder into alloc: EFAULT [ 50.383430][ T1018] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 50.390943][ T1018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 50.399414][ T1018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:148 [ 50.408914][ T9] steelseries 0003:1038:12B6.0008: hid_hw_raw_request() failed with -71 [ 50.428709][ T9] usb 1-1: USB disconnect, device number 9 [ 50.969488][ T1023] cannot load conntrack support for proto=3 [ 50.981939][ T1023] futex_wake_op: syz.0.212 tries to shift op by -1; fix this program [ 51.068448][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.079582][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 51.095256][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 51.101918][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 51.111011][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.122944][ T45] usb 4-1: config 0 descriptor?? [ 51.128502][ T1008] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 51.137815][ T1027] rust_binder: Error in use_page_slow: ESRCH [ 51.137840][ T1027] rust_binder: use_range failure ESRCH [ 51.143881][ T1027] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 51.158789][ T1027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.160151][ T1027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153 [ 51.435231][ T305] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 51.495220][ T368] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 51.530932][ T1041] cgroup: Unknown subsys name 'perf_event' [ 51.538359][ T45] logitech 0003:046D:C286.0009: unknown main item tag 0x6 [ 51.542611][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.552500][ T45] logitech 0003:046D:C286.0009: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.3-1/input0 [ 51.565328][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.566519][ T45] logitech 0003:046D:C286.0009: no inputs found [ 51.585263][ T305] usb 1-1: Using ep0 maxpacket: 32 [ 51.591627][ T305] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 51.600224][ T305] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 51.608987][ T305] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 51.617996][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 51.627667][ T305] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 51.637331][ T305] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.650544][ T305] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 51.659635][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.665197][ T368] usb 3-1: Using ep0 maxpacket: 16 [ 51.673158][ T305] usb 1-1: config 0 descriptor?? [ 51.676069][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.689021][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.698821][ T368] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 51.707929][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.722151][ T368] usb 3-1: config 0 descriptor?? [ 51.753838][ T45] usb 4-1: USB disconnect, device number 5 [ 51.885372][ T305] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 51.929869][ T368] gt683r_led 0003:1770:FF00.000A: item fetching failed at offset 1/5 [ 51.938201][ T368] gt683r_led 0003:1770:FF00.000A: hid parsing failed [ 51.944921][ T368] gt683r_led 0003:1770:FF00.000A: probe with driver gt683r_led failed with error -22 [ 52.084712][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.093287][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.247726][ T292] tipc: Subscription rejected, illegal request [ 52.299685][ T1060] can0: slcan on ptm0. [ 52.305249][ T368] usb 1-1: USB disconnect, device number 10 [ 52.325572][ T368] usblp0: removed [ 52.409821][ T45] usb 3-1: USB disconnect, device number 8 [ 52.537529][ T1083] rust_binder: Error while translating object. [ 52.537566][ T1083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 52.543881][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:125 [ 52.555240][ T305] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 52.716300][ T305] usb 4-1: config 0 has no interfaces? [ 52.723420][ T305] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 52.732598][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.740666][ T305] usb 4-1: Product: syz [ 52.744958][ T305] usb 4-1: Manufacturer: syz [ 52.749645][ T305] usb 4-1: SerialNumber: syz [ 52.758787][ T305] usb 4-1: config 0 descriptor?? [ 52.815225][ T45] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 52.838159][ T1089] Zero length message leads to an empty skb [ 52.978543][ T45] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.989950][ T45] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 53.000674][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 53.007368][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 53.017139][ T1060] can0 (unregistered): slcan off ptm0. [ 53.022754][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.031634][ T45] usb 3-1: config 0 descriptor?? [ 53.032246][ T9] usb 4-1: USB disconnect, device number 6 [ 53.040737][ T1078] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.085278][ T305] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 53.153061][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 53.153099][ T36] audit: type=1400 audit(1751325783.350:302): avc: denied { bind } for pid=1109 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.245213][ T305] usb 1-1: device descriptor read/64, error -71 [ 53.444608][ T1129] netlink: 'syz.1.235': attribute type 32 has an invalid length. [ 53.461850][ T45] logitech 0003:046D:C286.000B: unknown main item tag 0x6 [ 53.471735][ T45] logitech 0003:046D:C286.000B: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 53.483266][ T45] logitech 0003:046D:C286.000B: no inputs found [ 53.495237][ T305] usb 1-1: device descriptor read/64, error -71 [ 53.562213][ T1135] fuse: Unknown parameter '0x00000000000000050x0000000000000009' [ 53.570696][ T1135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 53.672450][ T307] usb 3-1: USB disconnect, device number 9 [ 53.745308][ T305] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.846648][ T36] audit: type=1400 audit(1751325784.050:303): avc: denied { bind } for pid=1156 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.865783][ T36] audit: type=1400 audit(1751325784.060:304): avc: denied { mount } for pid=1156 comm="syz.1.243" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 53.888248][ T305] usb 1-1: device descriptor read/64, error -71 [ 53.894982][ T36] audit: type=1400 audit(1751325784.060:305): avc: denied { write } for pid=1156 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.914314][ T36] audit: type=1400 audit(1751325784.060:306): avc: denied { read write } for pid=1156 comm="syz.1.243" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.937436][ T36] audit: type=1400 audit(1751325784.060:307): avc: denied { open } for pid=1156 comm="syz.1.243" path="/57/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.960877][ T36] audit: type=1400 audit(1751325784.080:308): avc: denied { unlink } for pid=289 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.995414][ T9] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 54.097128][ T292] bridge_slave_1: left allmulticast mode [ 54.102835][ T292] bridge_slave_1: left promiscuous mode [ 54.108718][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.116678][ T292] bridge_slave_0: left allmulticast mode [ 54.120429][ T36] audit: type=1400 audit(1751325784.320:309): avc: denied { mounton } for pid=1162 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.122338][ T292] bridge_slave_0: left promiscuous mode [ 54.149539][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.149662][ T305] usb 1-1: device descriptor read/64, error -71 [ 54.176816][ T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.187857][ T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 54.203051][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 54.209966][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 54.220358][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.229060][ T9] usb 4-1: config 0 descriptor?? [ 54.234276][ T1155] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.265326][ T305] usb usb1-port1: attempt power cycle [ 54.278948][ T292] veth1_macvtap: left promiscuous mode [ 54.284605][ T292] veth0_vlan: left promiscuous mode [ 54.344277][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.351455][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.358846][ T1162] bridge_slave_0: entered allmulticast mode [ 54.365327][ T1162] bridge_slave_0: entered promiscuous mode [ 54.371896][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.378993][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.386214][ T1162] bridge_slave_1: entered allmulticast mode [ 54.392627][ T1162] bridge_slave_1: entered promiscuous mode [ 54.445215][ T368] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.462411][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.469528][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.476838][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.483878][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.507451][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.515207][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.525050][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.532147][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.541664][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.548734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.578289][ T1162] veth0_vlan: entered promiscuous mode [ 54.589767][ T1162] veth1_macvtap: entered promiscuous mode [ 54.610023][ T36] audit: type=1400 audit(1751325784.810:310): avc: denied { mounton } for pid=1162 comm="syz-executor" path="/root/syzkaller.Vziw8i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.616774][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.636813][ T305] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.648096][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.668106][ T9] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 54.671709][ T368] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 54.679624][ T9] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 54.687423][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.693980][ T305] usb 1-1: device descriptor read/8, error -71 [ 54.712991][ T36] audit: type=1400 audit(1751325784.910:311): avc: denied { getopt } for pid=1168 comm="syz.4.246" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.718685][ T9] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 54.742173][ T9] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 54.742633][ T368] usb 3-1: config 0 descriptor?? [ 54.750564][ T9] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 54.768078][ T9] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 54.776724][ T1175] /dev/nullb0: Can't lookup blockdev [ 54.782194][ T9] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 54.790579][ T9] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 54.836412][ T305] usb 1-1: device descriptor read/8, error -71 [ 54.883797][ T45] usb 4-1: USB disconnect, device number 7 [ 55.075253][ T305] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.096371][ T305] usb 1-1: device descriptor read/8, error -71 [ 55.186174][ T368] belkin 0003:1020:0006.000D: unknown main item tag 0x3 [ 55.198265][ T368] belkin 0003:1020:0006.000D: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 55.226593][ T305] usb 1-1: device descriptor read/8, error -71 [ 55.360959][ T305] usb usb1-port1: unable to enumerate USB device [ 55.729048][ T1196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 55.745482][ T1196] rust_binder: Write failure EFAULT in pid:17 [ 55.884067][ T1217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.899856][ T1219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 55.899877][ T1219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:188 [ 55.981581][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.001308][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.010820][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.021890][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.031146][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.040443][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.049842][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.059125][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.068385][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.077606][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.086885][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.096147][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.105433][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.114651][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.123881][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.133194][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.142527][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.151791][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.161043][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.170340][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.179738][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.189079][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.198413][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.207998][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.217273][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.226581][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.235956][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.245310][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.254588][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.263946][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.273265][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.282512][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.291779][ T1226] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.622216][ T1244] ./cgroup: Can't lookup blockdev [ 56.627655][ T1244] ./cgroup: Can't lookup blockdev [ 56.920499][ T1288] netlink: 188 bytes leftover after parsing attributes in process `syz.4.281'. [ 56.934422][ T1288] rust_binder: Error while translating object. [ 56.934456][ T1288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.940759][ T1288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 56.988410][ T1293] fuse: Unknown parameter '000000000000000000030x0000000000000007' [ 57.006660][ T1293] raw_sendmsg: syz.3.283 forgot to set AF_INET. Fix it! [ 57.110290][ T1297] overlayfs: conflicting options: userxattr,metacopy=on [ 57.144532][ T1297] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 57.158793][ T1297] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 57.221802][ T10] usb 3-1: USB disconnect, device number 10 [ 57.242541][ T1308] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.264780][ T1313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.265037][ T1313] rust_binder: Error while translating object. [ 57.276736][ T1313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.283009][ T1313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 57.345802][ T1322] kvm: user requested TSC rate below hardware speed [ 57.368412][ T1322] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 57.368439][ T1322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 57.377217][ T1322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:221 [ 57.396283][ T1327] can0: slcan on ptm0. [ 57.456744][ T1327] can0 (unregistered): slcan off ptm0. [ 57.575190][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 57.600357][ T1358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 57.662115][ T1367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.662608][ T1368] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.674986][ T1367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.683705][ T1349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.736276][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 57.752886][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 57.764307][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 57.773466][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.781513][ T10] usb 3-1: Product: syz [ 57.785708][ T10] usb 3-1: Manufacturer: syz [ 57.790306][ T10] usb 3-1: SerialNumber: syz [ 57.805618][ T10] usb 3-1: config 0 descriptor?? [ 57.810986][ T1311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.819555][ T1311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.960989][ T1385] batadv_slave_1: entered promiscuous mode [ 57.967303][ T1385] batadv_slave_1: left promiscuous mode [ 58.029666][ T1311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.036963][ T1311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.041454][ T1387] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 58.044162][ T1387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 58.052274][ T1387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:82 [ 58.115182][ T45] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 58.255259][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.425228][ T368] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 58.453403][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 58.461313][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 58.461332][ T36] audit: type=1400 audit(1751325788.650:334): avc: denied { audit_write } for pid=1310 comm="syz.2.288" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.488620][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 58.495767][ T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 58.505855][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.505918][ T10] usb 3-1: USB disconnect, device number 11 [ 58.531090][ T36] audit: type=1400 audit(1751325788.730:335): avc: denied { map } for pid=1402 comm="syz.2.310" path="socket:[11178]" dev="sockfs" ino=11178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 58.565195][ T368] usb 5-1: device descriptor read/64, error -71 [ 58.745238][ T45] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 58.805188][ T368] usb 5-1: device descriptor read/64, error -71 [ 58.875195][ T45] usb 4-1: device descriptor read/64, error -71 [ 59.045196][ T368] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 59.115295][ T45] usb 4-1: device descriptor read/64, error -71 [ 59.175195][ T368] usb 5-1: device descriptor read/64, error -71 [ 59.225267][ T45] usb usb4-port1: attempt power cycle [ 59.415230][ T368] usb 5-1: device descriptor read/64, error -71 [ 59.525308][ T368] usb usb5-port1: attempt power cycle [ 59.565201][ T45] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 59.586212][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.716339][ T45] usb 4-1: device descriptor read/8, error -71 [ 59.865217][ T368] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 59.886271][ T368] usb 5-1: device descriptor read/8, error -71 [ 59.955246][ T45] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 59.976271][ T45] usb 4-1: device descriptor read/8, error -71 [ 60.016255][ T368] usb 5-1: device descriptor read/8, error -71 [ 60.106251][ T45] usb 4-1: device descriptor read/8, error -71 [ 60.208532][ T1413] FAT-fs (rnullb0): bogus number of reserved sectors [ 60.215448][ T1413] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 60.222285][ T45] usb usb4-port1: unable to enumerate USB device [ 60.236942][ T1418] rust_binder: Write failure EINVAL in pid:184 [ 60.259949][ T1422] binder: Unknown parameter 'sdcabel' [ 60.271667][ T368] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 60.272598][ T1422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 60.289234][ T36] audit: type=1400 audit(1751325790.500:336): avc: denied { map } for pid=1421 comm="syz.2.316" path="socket:[10212]" dev="sockfs" ino=10212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.314504][ T368] usb 5-1: device descriptor read/8, error -71 [ 60.323128][ T1425] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 60.323153][ T1425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 60.331242][ T1425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:192 [ 60.368340][ T1427] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 60.386581][ T1427] rust_binder: Error while translating object. [ 60.386610][ T1427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 60.392806][ T1427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:195 [ 60.428738][ T36] audit: type=1400 audit(1751325790.630:337): avc: denied { setopt } for pid=1430 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.459557][ T368] usb 5-1: device descriptor read/8, error -71 [ 60.573464][ T1436] binder: Unknown parameter 'fscontext?}' [ 60.579410][ T368] usb usb5-port1: unable to enumerate USB device [ 60.888276][ T1439] binder: Bad value for 'max' [ 61.027116][ T1445] netlink: 'syz.3.324': attribute type 4 has an invalid length. [ 61.095324][ T36] audit: type=1400 audit(1751325791.300:338): avc: denied { load_policy } for pid=1452 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.099398][ T1453] SELinux: failed to load policy [ 61.133084][ T1457] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 61.224940][ T1477] syz.3.331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.243359][ T36] audit: type=1400 audit(1751325791.440:339): avc: denied { connect } for pid=1474 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.318660][ T1489] overlay: ./file0 is not a directory [ 61.319122][ T36] audit: type=1400 audit(1751325791.520:340): avc: denied { relabelfrom } for pid=1488 comm="syz.0.335" name="UNIX" dev="sockfs" ino=12456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 61.347824][ T36] audit: type=1326 audit(1751325791.520:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.2.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x0 [ 61.382985][ T1493] can0: slcan on ptm1. [ 61.475194][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 61.559792][ T36] audit: type=1400 audit(1751325791.760:342): avc: denied { getopt } for pid=1514 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.607264][ T1522] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 61.635190][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 61.640422][ T305] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 61.649402][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.659659][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 61.668800][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.679118][ T10] usb 4-1: config 0 descriptor?? [ 61.795317][ T305] usb 1-1: Invalid ep0 maxpacket: 64 [ 61.925194][ T305] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 62.075167][ T305] usb 1-1: Invalid ep0 maxpacket: 64 [ 62.080645][ T305] usb usb1-port1: attempt power cycle [ 62.089737][ T10] apple 0003:05AC:0225.000E: unknown main item tag 0x3 [ 62.096748][ T10] apple 0003:05AC:0225.000E: item fetching failed at offset 4/5 [ 62.104619][ T10] apple 0003:05AC:0225.000E: parse failed [ 62.110505][ T10] apple 0003:05AC:0225.000E: probe with driver apple failed with error -22 [ 62.298794][ T36] audit: type=1326 audit(1751325792.500:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.2.350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x0 [ 62.298975][ T10] usb 4-1: USB disconnect, device number 12 [ 62.400081][ T1545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1545 comm=syz.2.350 [ 62.425230][ T305] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 62.445550][ T305] usb 1-1: Invalid ep0 maxpacket: 64 [ 62.576646][ T305] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 62.595576][ T305] usb 1-1: Invalid ep0 maxpacket: 64 [ 62.601069][ T305] usb usb1-port1: unable to enumerate USB device [ 62.898056][ T10] hid-generic 768D:0003:FFFFFFFE.000F: unknown main item tag 0x0 [ 62.906927][ T10] hid-generic 768D:0003:FFFFFFFE.000F: unknown main item tag 0x0 [ 62.916643][ T10] hid-generic 768D:0003:FFFFFFFE.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.133066][ T1561] fuse: Bad value for 'fd' [ 63.455305][ T10] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 63.616575][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.621098][ T36] audit: type=1400 audit(1751325793.820:344): avc: denied { read write } for pid=1563 comm="syz.4.355" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.624284][ T10] usb 3-1: no configurations [ 63.649471][ T1565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 63.653533][ T10] usb 3-1: can't read configurations, error -22 [ 63.653962][ T36] audit: type=1400 audit(1751325793.820:345): avc: denied { open } for pid=1563 comm="syz.4.355" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.785197][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 63.935260][ T305] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 63.944087][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.951942][ T10] usb 3-1: no configurations [ 63.956587][ T10] usb 3-1: can't read configurations, error -22 [ 63.962965][ T10] usb usb3-port1: attempt power cycle [ 64.086273][ T305] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.096495][ T305] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 64.105502][ T305] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 64.114607][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.123278][ T305] usb 4-1: config 0 descriptor?? [ 64.305202][ T10] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 64.326851][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 64.334564][ T10] usb 3-1: no configurations [ 64.339219][ T10] usb 3-1: can't read configurations, error -22 [ 64.436906][ T1492] can0 (unregistered): slcan off ptm1. [ 64.458926][ T1584] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 64.475365][ T10] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 64.507993][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 64.508295][ T1590] can0: slcan on ptm0. [ 64.516088][ T1589] __vm_enough_memory: pid: 1589, comm: syz.0.360, bytes: 70373039144960 not enough memory for the allocation [ 64.531445][ T10] usb 3-1: no configurations [ 64.536231][ T10] usb 3-1: can't read configurations, error -22 [ 64.545459][ T10] usb usb3-port1: unable to enumerate USB device [ 64.545468][ T1589] futex_wake_op: syz.0.360 tries to shift op by -1; fix this program [ 64.547519][ T1589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 64.745231][ T305] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 64.895237][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 64.903805][ T305] usb 5-1: config 0 has no interfaces? [ 64.911077][ T305] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 64.920249][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.928310][ T305] usb 5-1: Product: syz [ 64.932502][ T305] usb 5-1: Manufacturer: syz [ 64.937135][ T305] usb 5-1: SerialNumber: syz [ 64.942784][ T305] usb 5-1: config 0 descriptor?? [ 65.045199][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 65.051522][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.062488][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.072285][ T10] usb 1-1: New USB device found, idVendor=0dac, idProduct=024b, bcdDevice= 0.04 [ 65.081347][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.090005][ T10] usb 1-1: config 0 descriptor?? [ 65.148660][ T1407] usb 5-1: USB disconnect, device number 7 [ 65.216792][ T1590] can0 (unregistered): slcan off ptm0. [ 65.497657][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x6 [ 65.505273][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.512693][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.520130][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.527565][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.534962][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.542397][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.549827][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.557242][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.564677][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.572100][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.579515][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.586925][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.594331][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.605214][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.612729][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.635487][ T10] hid-generic 0003:0DAC:024B.0010: unknown main item tag 0x0 [ 65.647672][ T10] hid-generic 0003:0DAC:024B.0010: hidraw0: USB HID v0.00 Device [HID 0dac:024b] on usb-dummy_hcd.0-1/input0 [ 65.702674][ T1609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.706552][ T10] usb 1-1: USB disconnect, device number 19 [ 65.743680][ T1668] SELinux: failed to load policy [ 66.206240][ T1673] netlink: 'syz.2.365': attribute type 4 has an invalid length. [ 66.223995][ T1673] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.365'. [ 66.238317][ T1677] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 66.383769][ T36] audit: type=1400 audit(1751325796.580:346): avc: denied { associate } for pid=1686 comm="syz.0.370" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.433407][ T36] audit: type=1400 audit(1751325796.630:347): avc: denied { ioctl } for pid=1690 comm="syz.2.372" path="socket:[12918]" dev="sockfs" ino=12918 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.523658][ T36] audit: type=1400 audit(1751325796.720:348): avc: denied { mounton } for pid=1694 comm="syz.2.373" path="/70/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 66.580281][ T1689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 66.603638][ T36] audit: type=1400 audit(1751325796.800:349): avc: denied { accept } for pid=1688 comm="syz.0.371" path="socket:[11995]" dev="sockfs" ino=11995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 66.655513][ T36] audit: type=1400 audit(1751325796.860:350): avc: denied { create } for pid=1701 comm="syz.2.375" name="#19" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.665211][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 66.675950][ T36] audit: type=1400 audit(1751325796.860:351): avc: denied { link } for pid=1701 comm="syz.2.375" name="#19" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.705581][ T36] audit: type=1400 audit(1751325796.860:352): avc: denied { rename } for pid=1701 comm="syz.2.375" name="#1a" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.786106][ T1407] usb 4-1: USB disconnect, device number 13 [ 66.800911][ T1710] securityfs: Unknown parameter '!'$^&-}' [ 66.835309][ T36] audit: type=1400 audit(1751325797.040:353): avc: denied { listen } for pid=1714 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.868464][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 67.036911][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 67.045746][ T10] usb 5-1: config 14 has an invalid interface number: 224 but max is 0 [ 67.054052][ T10] usb 5-1: config 14 has no interface number 0 [ 67.060574][ T10] usb 5-1: config 14 interface 224 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 67.071768][ T10] usb 5-1: config 14 interface 224 altsetting 6 endpoint 0x8 has invalid maxpacket 12783, setting to 64 [ 67.083189][ T10] usb 5-1: config 14 interface 224 has no altsetting 0 [ 67.091767][ T10] usb 5-1: New USB device found, idVendor=19d2, idProduct=0167, bcdDevice=ba.31 [ 67.101311][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.109549][ T10] usb 5-1: Product: 돝遭䘣듅俛㰳ࠟ㶶廪蕂瓗艏갪꺣€⊃ۗ礲᥋ᖂ䃬鱂鑺薁廸苈ꈠ嶰索䆸鴓ᨷ鶉颰鍃洳խڦꖑ⥅޷蓥梻 [ 67.149276][ T10] usb 5-1: Manufacturer: Љ [ 67.160745][ T10] usb 5-1: SerialNumber: syz [ 67.168948][ T1749] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 67.180635][ T1704] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 67.216138][ T1750] FAT-fs (rnullb0): bogus number of reserved sectors [ 67.222916][ T1750] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 67.275186][ T305] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 67.405202][ T305] usb 4-1: device descriptor read/64, error -71 [ 67.485210][ T9] usb 1-1: device descriptor read/64, error -71 [ 67.645191][ T305] usb 4-1: device descriptor read/64, error -71 [ 67.745194][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 67.752216][ T9] usb 1-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 1023 [ 67.762282][ T9] usb 1-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 67.772357][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 67.780402][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.789492][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.797520][ T9] usb 1-1: Product: ᰊ [ 67.797752][ T1704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.801687][ T9] usb 1-1: Manufacturer: 㣵髲꫐黎㌨䦅囝磺⟿ሗ㷖礻斸綤策慮퟾❠迊鎈醏绻˻蔦㛾ﰂ則쎵즀 [ 67.801715][ T9] usb 1-1: SerialNumber: ఄ [ 67.811356][ T1704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.830284][ T1749] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.842219][ T1749] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.895193][ T305] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 68.025184][ T305] usb 4-1: device descriptor read/64, error -71 [ 68.265192][ T305] usb 4-1: device descriptor read/64, error -71 [ 68.279900][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 16 proto 2 vid 0x0525 pid 0xA4A8 [ 68.292560][ T9] usb 1-1: USB disconnect, device number 20 [ 68.299307][ T9] usblp0: removed [ 68.375369][ T305] usb usb4-port1: attempt power cycle [ 68.540873][ T1758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.549505][ T1758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.584411][ T1760] overlayfs: missing 'lowerdir' [ 68.689249][ T1766] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 68.700917][ T1766] overlayfs: missing 'lowerdir' [ 68.715208][ T305] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 68.726530][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 68.726547][ T36] audit: type=1326 audit(1751325798.930:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1767 comm="syz.2.399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3726f8e929 code=0x0 [ 68.756278][ T305] usb 4-1: device descriptor read/8, error -71 [ 68.779271][ T1769] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 68.787311][ T1769] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 68.796785][ T1769] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 68.804796][ T1769] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 68.887040][ T305] usb 4-1: device descriptor read/8, error -71 [ 68.888338][ T1777] overlayfs: missing 'lowerdir' [ 68.911282][ T1779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.911889][ T1779] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 68.918516][ T1779] rust_binder: Read failure Err(EFAULT) in pid:302 [ 69.125185][ T305] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 69.156181][ T305] usb 4-1: device descriptor read/8, error -71 [ 69.175195][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 69.286219][ T305] usb 4-1: device descriptor read/8, error -71 [ 69.325217][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 69.331779][ T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 69.339996][ T45] usb 1-1: config 0 has no interface number 0 [ 69.346112][ T45] usb 1-1: config 0 interface 184 has no altsetting 0 [ 69.354226][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 69.363945][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.371982][ T45] usb 1-1: Product: syz [ 69.376178][ T45] usb 1-1: Manufacturer: syz [ 69.380788][ T45] usb 1-1: SerialNumber: syz [ 69.386088][ T45] usb 1-1: config 0 descriptor?? [ 69.391819][ T45] smsc75xx v1.0.0 [ 69.395308][ T305] usb usb4-port1: unable to enumerate USB device [ 69.927554][ T10] usb 5-1: USB disconnect, device number 8 [ 69.947348][ T1787] input: syz0 as /devices/virtual/input/input7 [ 70.197909][ T292] bridge_slave_1: left allmulticast mode [ 70.203946][ T292] bridge_slave_1: left promiscuous mode [ 70.209898][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.217790][ T292] bridge_slave_0: left allmulticast mode [ 70.223496][ T292] bridge_slave_0: left promiscuous mode [ 70.229662][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.355252][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 70.367038][ T292] veth1_macvtap: left promiscuous mode [ 70.372637][ T292] veth0_vlan: left promiscuous mode [ 70.448286][ T1795] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.455415][ T1795] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.462554][ T1795] bridge_slave_0: entered allmulticast mode [ 70.468898][ T1795] bridge_slave_0: entered promiscuous mode [ 70.475442][ T1795] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.482501][ T1795] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.489616][ T1795] bridge_slave_1: entered allmulticast mode [ 70.496749][ T1795] bridge_slave_1: entered promiscuous mode [ 70.507429][ T10] usb 5-1: device descriptor read/64, error -71 [ 70.559888][ T1795] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.567000][ T1795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.574297][ T1795] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.581367][ T1795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.594483][ T36] audit: type=1326 audit(1751325800.790:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1781 comm="syz.0.404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841678e929 code=0x0 [ 70.617512][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.624900][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.634413][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.641522][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.650978][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.658057][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.663389][ T1801] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 70.675643][ T305] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 70.695119][ T1795] veth0_vlan: entered promiscuous mode [ 70.707978][ T1795] veth1_macvtap: entered promiscuous mode [ 70.745218][ T10] usb 5-1: device descriptor read/64, error -71 [ 70.835186][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 70.842380][ T305] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.855761][ T305] usb 3-1: config 1 interface 0 has no altsetting 0 [ 70.864060][ T305] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 70.873859][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.882060][ T305] usb 3-1: Product: syz [ 70.886680][ T305] usb 3-1: Manufacturer: 祻곾೮憅꿭耙鳧ꭓ␬蝿뎬∸꼿ᖶ䞐즄葡旵捣맊琝쩾᫡柵㡩艹쥼⑵옻喵萜㿘뭦囄⹛␾ﲙ튙纎溠簋㬮橇纛濾⸮뷛ײ皀Pㇵ策ꇙ綗࿶ሐ拊鎶䠼⡂很芦좉瑘셮 [ 70.887280][ T1804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.909580][ T305] usb 3-1: SerialNumber: syz [ 70.995230][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 71.126162][ T10] usb 5-1: device descriptor read/64, error -71 [ 71.375221][ T10] usb 5-1: device descriptor read/64, error -71 [ 71.485319][ T10] usb usb5-port1: attempt power cycle [ 71.725689][ T1797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.734257][ T1797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.743015][ T1797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.751648][ T1797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.760913][ T1797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.770273][ T1797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.785044][ T305] usbhid 3-1:1.0: can't add hid device: -71 [ 71.791129][ T305] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 71.800428][ T305] usb 3-1: USB disconnect, device number 16 [ 71.825248][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 71.846490][ T10] usb 5-1: device descriptor read/8, error -71 [ 71.950016][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 71.962567][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 71.976589][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 71.987949][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 71.997805][ T10] usb 5-1: device descriptor read/8, error -71 [ 72.004549][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 72.005851][ T1812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.015747][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 72.025264][ T1812] rust_binder: Error while translating object. [ 72.031566][ T1812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 72.033864][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 72.047301][ T1812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:309 [ 72.058912][ T45] usb 1-1: USB disconnect, device number 21 [ 72.081457][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.081928][ T1814] rust_binder: 1814: no such ref 4294967293 [ 72.245202][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 72.266895][ T10] usb 5-1: device descriptor read/8, error -71 [ 72.305651][ T1824] rust_binder: Error in use_page_slow: ESRCH [ 72.305672][ T1824] rust_binder: use_range failure ESRCH [ 72.311676][ T1824] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 72.317369][ T1824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 72.325415][ T1824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:286 [ 72.406869][ T10] usb 5-1: device descriptor read/8, error -71 [ 72.505304][ T45] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 72.525317][ T10] usb usb5-port1: unable to enumerate USB device [ 72.666380][ T45] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.668718][ T1843] overlayfs: conflicting options: metacopy=off,verity=on [ 72.677591][ T45] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 72.695405][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 72.697194][ T1843] rust_binder: Error while translating object. [ 72.702035][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 72.702049][ T1843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.702074][ T1843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 72.708312][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.749850][ T45] usb 1-1: config 0 descriptor?? [ 72.755232][ T1822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.775421][ T10] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 72.803347][ T1847] netlink: 'syz.3.426': attribute type 12 has an invalid length. [ 72.811973][ T1847] netlink: 'syz.3.426': attribute type 11 has an invalid length. [ 72.920846][ T1849] rust_binder: Write failure EFAULT in pid:20 [ 72.926390][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 72.939601][ T1851] fuse: Unknown parameter 'rootmode&0000000Ց' [ 72.943515][ T10] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 72.963107][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 72.969808][ T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 72.989336][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.999543][ T1854] af_packet: tpacket_rcv: packet too big, clamped from 26 to 4294967272. macoff=96 [ 73.009189][ T10] usb 3-1: config 0 descriptor?? [ 73.025970][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 73.165824][ T1859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.175014][ T1859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.184682][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 73.190802][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 73.200514][ T45] usb 1-1: USB disconnect, device number 22 [ 73.320002][ T1871] overlayfs: overlapping lowerdir path [ 73.575190][ T1407] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 73.726544][ T1407] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.737528][ T1407] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.747325][ T1407] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.753961][ T1407] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 73.763069][ T1407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.772519][ T1407] usb 4-1: config 0 descriptor?? [ 73.785762][ T1883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.849898][ T1883] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=896 (1792 ns) > initial count (1408 ns). Using initial count to start timer. [ 73.878671][ T1883] kvm: pic: non byte write [ 73.889281][ T36] audit: type=1400 audit(1751325804.090:358): avc: denied { write } for pid=1882 comm="syz.0.437" path="socket:[14260]" dev="sockfs" ino=14260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.914336][ T1883] rust_binder: Error while translating object. [ 73.914366][ T1883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.921354][ T1883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 74.070212][ T36] audit: type=1400 audit(1751325804.270:359): avc: denied { create } for pid=1905 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.181470][ T1407] hid-generic 0003:04F3:0755.0011: unknown main item tag 0x3 [ 74.189090][ T1407] hid-generic 0003:04F3:0755.0011: failed to start in urb: -90 [ 74.197470][ T1407] hid-generic 0003:04F3:0755.0011: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 74.255222][ T305] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 74.375182][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 74.405180][ T305] usb 5-1: Using ep0 maxpacket: 8 [ 74.411411][ T305] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.419824][ T305] usb 5-1: config 179 has no interface number 0 [ 74.426127][ T305] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 74.437195][ T305] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 74.448561][ T305] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.459909][ T305] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 74.471344][ T305] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.484616][ T305] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.493781][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.502805][ T1904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 74.536263][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.546470][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.556386][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.565506][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.573549][ T10] usb 1-1: SerialNumber: syz [ 74.916297][ T305] usb 5-1: USB disconnect, device number 13 [ 74.922260][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 74.922301][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 75.288679][ T10] usb 1-1: USB disconnect, device number 23 [ 75.320062][ T1914] syzkaller0: create flow: hash 2417220042 index 0 [ 75.376303][ T1914] syzkaller0 (unregistered): delete flow: hash 2417220042 index 0 [ 75.413785][ T36] audit: type=1400 audit(1751325805.610:360): avc: denied { read } for pid=1917 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.419846][ T1918] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 75.506396][ T1933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 75.532554][ T1936] overlayfs: failed to resolve './file1': -2 [ 75.554616][ T368] usb 3-1: USB disconnect, device number 17 [ 75.639174][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.744938][ T1946] incfs: Can't find or create .index dir in ./cgroup [ 75.751953][ T1946] incfs: mount failed -22 [ 75.892637][ T36] audit: type=1400 audit(1751325806.090:361): avc: denied { create } for pid=1948 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 76.156077][ T1962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 76.263339][ T368] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 76.343008][ T10] usb 4-1: USB disconnect, device number 18 [ 76.356844][ T1975] rust_binder: Got transaction with invalid offset. [ 76.356880][ T1975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.363672][ T1975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 76.416514][ T368] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 76.433737][ T368] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.443887][ T368] usb 5-1: config 0 has no interface number 0 [ 76.451481][ T368] usb 5-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 76.460574][ T368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.468595][ T368] usb 5-1: Product: syz [ 76.472763][ T368] usb 5-1: Manufacturer: syz [ 76.477730][ T368] usb 5-1: SerialNumber: syz [ 76.483326][ T368] usb 5-1: config 0 descriptor?? [ 76.685264][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 76.694044][ T1949] rust_binder: Write failure EINVAL in pid:187 [ 76.835191][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 76.847698][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 76.856027][ T10] usb 4-1: config 179 has no interface number 0 [ 76.862372][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 76.873492][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 76.884771][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.896024][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 76.907482][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 76.920762][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 76.929834][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.939116][ T1977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.354360][ T1014] usb 4-1: USB disconnect, device number 19 [ 77.360368][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 77.360412][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 77.406250][ T36] audit: type=1400 audit(1751325807.610:362): avc: denied { bind } for pid=1996 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.675197][ T613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.675222][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 77.941825][ T36] audit: type=1400 audit(1751325808.140:363): avc: denied { map } for pid=2017 comm="syz.2.485" path="socket:[15112]" dev="sockfs" ino=15112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.985409][ T36] audit: type=1400 audit(1751325808.190:364): avc: denied { getopt } for pid=2026 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.007082][ T2032] overlayfs: failed to resolve './file1': -2 [ 78.043837][ T36] audit: type=1400 audit(1751325808.240:365): avc: denied { shutdown } for pid=2038 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.107007][ T36] audit: type=1400 audit(1751325808.310:366): avc: denied { lock } for pid=2046 comm="syz.0.495" path="socket:[15761]" dev="sockfs" ino=15761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.275239][ T1014] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 78.322050][ T2069] overlayfs: failed to resolve './file1': -2 [ 78.329004][ T2069] rust_binder: Got transaction with invalid offset. [ 78.329038][ T2069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.335830][ T2069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345 [ 78.425182][ T1014] usb 4-1: Using ep0 maxpacket: 8 [ 78.440901][ T1014] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 78.449354][ T1014] usb 4-1: config 179 has no interface number 0 [ 78.456283][ T1014] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 78.467550][ T1014] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 78.478929][ T1014] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.490092][ T1014] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 78.501554][ T1014] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 78.514812][ T1014] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 78.523900][ T1014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.533082][ T2042] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.695282][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 78.845183][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 78.852919][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.862070][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.870114][ T31] usb 3-1: Product: syz [ 78.874340][ T31] usb 3-1: Manufacturer: syz [ 78.878990][ T31] usb 3-1: SerialNumber: syz [ 78.907020][ T368] usb 5-1: Found UVC 0.00 device syz (056d:0000) [ 78.913471][ T368] usb 5-1: No valid video chain found. [ 78.923269][ T368] usb 5-1: USB disconnect, device number 14 [ 78.946955][ T45] usb 4-1: USB disconnect, device number 20 [ 78.947043][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 78.961541][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 79.138344][ T2088] exFAT-fs (rnullb0): invalid boot record signature [ 79.145242][ T2088] exFAT-fs (rnullb0): failed to read boot sector [ 79.151614][ T2088] exFAT-fs (rnullb0): failed to recognize exfat type [ 79.172671][ T2090] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.180678][ T2090] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 79.189255][ T2090] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 79.197354][ T2090] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 79.294722][ T2095] overlayfs: failed to resolve './file1': -2 [ 79.371498][ T2101] 9pnet_fd: Insufficient options for proto=fd [ 79.391442][ T2103] overlayfs: failed to clone upperpath [ 79.491695][ T2111] netlink: 288 bytes leftover after parsing attributes in process `syz.3.518'. [ 79.502075][ T2111] rust_binder: Error while translating object. [ 79.502128][ T2111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 79.502811][ T36] audit: type=1400 audit(1751325809.700:367): avc: denied { ioctl } for pid=2110 comm="syz.3.518" path="socket:[15972]" dev="sockfs" ino=15972 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.508848][ T2111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:69 [ 79.546863][ T2113] netlink: 'syz.0.519': attribute type 11 has an invalid length. [ 79.584218][ T2122] overlayfs: failed to resolve './file1': -2 [ 79.595232][ T1014] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 79.746400][ T1014] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.757386][ T1014] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.767185][ T1014] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.773822][ T1014] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 79.782913][ T1014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.791729][ T1014] usb 5-1: config 0 descriptor?? [ 80.096643][ T36] audit: type=1400 audit(1751325810.300:368): avc: denied { read } for pid=2126 comm="syz.3.524" path="socket:[16003]" dev="sockfs" ino=16003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.206506][ T1014] hid-generic 0003:04F3:0755.0012: unknown main item tag 0x3 [ 80.214170][ T1014] hid-generic 0003:04F3:0755.0012: failed to start in urb: -90 [ 80.232614][ T1014] hid-generic 0003:04F3:0755.0012: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 80.479268][ T36] audit: type=1400 audit(1751325810.680:369): avc: denied { map } for pid=2135 comm="syz.3.527" path="socket:[16024]" dev="sockfs" ino=16024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.554041][ T2141] rust_binder: Write failure EFAULT in pid:89 [ 80.644254][ T36] audit: type=1326 audit(1751325810.840:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.3.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a2218e929 code=0x0 [ 80.691593][ T2148] overlayfs: failed to resolve './file1': -2 [ 80.699766][ T2148] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 80.701102][ T2148] rust_binder: Error in use_page_slow: ESRCH [ 80.709080][ T2148] rust_binder: use_range failure ESRCH [ 80.715242][ T2148] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 80.720895][ T2148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 80.728927][ T2148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:96 [ 81.419114][ T36] audit: type=1400 audit(1751325811.620:371): avc: denied { name_bind } for pid=2160 comm="syz.3.535" src=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 81.497685][ T31] cdc_ncm 3-1:1.0: bind() failure [ 81.504259][ T31] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 81.512529][ T31] cdc_ncm 3-1:1.1: bind() failure [ 81.519097][ T31] usb 3-1: USB disconnect, device number 18 [ 81.705183][ T305] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 81.835278][ T305] usb 4-1: device descriptor read/64, error -71 [ 81.919046][ T36] audit: type=1400 audit(1751325812.120:372): avc: denied { execute } for pid=2195 comm="syz.2.546" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 82.075266][ T305] usb 4-1: device descriptor read/64, error -71 [ 82.207980][ T2208] Dead loop on virtual device ip6_vti0, fix it urgently! [ 82.215291][ T2208] Dead loop on virtual device ip6_vti0, fix it urgently! [ 82.222619][ T2208] Dead loop on virtual device ip6_vti0, fix it urgently! [ 82.230104][ T2208] Dead loop on virtual device ip6_vti0, fix it urgently! [ 82.237426][ T2208] Dead loop on virtual device ip6_vti0, fix it urgently! [ 82.244937][ T2208] Dead loop on virtual device ip6_vti0, fix it urgently! [ 82.315192][ T305] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 82.344338][ T10] usb 5-1: USB disconnect, device number 15 [ 82.445231][ T305] usb 4-1: device descriptor read/64, error -71 [ 82.685192][ T305] usb 4-1: device descriptor read/64, error -71 [ 82.755185][ T2228] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709550795) [ 82.755213][ T2228] rust_binder: Error while translating object. [ 82.767558][ T2228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.774402][ T2228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 82.795262][ T305] usb usb4-port1: attempt power cycle [ 82.975241][ T2239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 83.145216][ T305] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 83.166627][ T305] usb 4-1: device descriptor read/8, error -71 [ 83.295247][ T1014] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 83.303952][ T305] usb 4-1: device descriptor read/8, error -71 [ 83.446315][ T1014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.457287][ T1014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.467088][ T1014] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 83.476179][ T1014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.484857][ T1014] usb 5-1: config 0 descriptor?? [ 83.545204][ T305] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 83.566232][ T305] usb 4-1: device descriptor read/8, error -71 [ 83.696165][ T305] usb 4-1: device descriptor read/8, error -71 [ 83.805291][ T305] usb usb4-port1: unable to enumerate USB device [ 83.837021][ T2257] overlayfs: failed to resolve './file1': -2 [ 83.844157][ T2257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 83.844183][ T2257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:389 [ 83.854000][ T2257] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 83.863217][ T2257] rust_binder: Error in use_page_slow: EBUSY [ 83.873625][ T2257] rust_binder: use_range failure EBUSY [ 83.879674][ T2257] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 83.885175][ T2257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 83.893303][ T2257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:389 [ 83.894425][ T1014] belkin 0003:1020:0006.0013: unknown main item tag 0x3 [ 83.919964][ T1014] belkin 0003:1020:0006.0013: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.4-1/input0 [ 84.167004][ T2263] rust_binder: 2263: no such ref 3 [ 84.617710][ T2266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.628217][ T2266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.887675][ T2278] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 84.899481][ T2278] overlayfs: missing 'lowerdir' [ 85.214905][ T36] audit: type=1326 audit(1751325815.410:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2282 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 85.487646][ T2293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 85.487674][ T2293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:408 [ 85.497483][ T2293] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 85.506812][ T2293] rust_binder: Error in use_page_slow: EBUSY [ 85.517447][ T2293] rust_binder: use_range failure EBUSY [ 85.523452][ T2293] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 85.528953][ T2293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 85.536906][ T2293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:408 [ 85.753236][ T2299] cgroup: Unknown subsys name 'measure' [ 85.769055][ T2299] rust_binder: Error while translating object. [ 85.769106][ T2299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 85.775401][ T2299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:413 [ 85.875253][ T36] audit: type=1400 audit(1751325816.080:374): avc: denied { setattr } for pid=2306 comm="syz.0.581" name="NETLINK" dev="sockfs" ino=17300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.020134][ T2316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 86.069168][ T1014] usb 5-1: USB disconnect, device number 16 [ 86.108028][ T2320] SELinux: ebitmap: truncated map [ 86.113212][ T2320] SELinux: failed to load policy [ 86.482105][ T36] audit: type=1326 audit(1751325816.680:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2297 comm="syz.2.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 86.505448][ T36] audit: type=1326 audit(1751325816.680:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2297 comm="syz.2.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 86.528850][ T36] audit: type=1326 audit(1751325816.680:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2297 comm="syz.2.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 86.552275][ T36] audit: type=1326 audit(1751325816.680:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2297 comm="syz.2.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 86.575760][ T36] audit: type=1326 audit(1751325816.680:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2297 comm="syz.2.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 86.599945][ T36] audit: type=1326 audit(1751325816.680:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2297 comm="syz.2.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 86.623239][ T1014] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 86.631142][ T36] audit: type=1326 audit(1751325816.680:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2297 comm="syz.2.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 86.654880][ T36] audit: type=1326 audit(1751325816.680:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2297 comm="syz.2.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3726f8e929 code=0x7fc00000 [ 86.795242][ T1014] usb 5-1: Using ep0 maxpacket: 16 [ 86.802420][ T1014] usb 5-1: config index 0 descriptor too short (expected 1554, got 18) [ 86.810955][ T1014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.821500][ T1014] usb 5-1: config 0 has no interfaces? [ 86.828493][ T1014] usb 5-1: New USB device found, idVendor=07c4, idProduct=a005, bcdDevice=f8.79 [ 86.837736][ T1014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.845794][ T1014] usb 5-1: Product: syz [ 86.850038][ T1014] usb 5-1: Manufacturer: syz [ 86.854660][ T1014] usb 5-1: SerialNumber: syz [ 86.861881][ T1014] usb 5-1: config 0 descriptor?? [ 86.955178][ T1407] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 87.000472][ T2361] bpf: Bad value for 'uid' [ 87.071827][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.081263][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.091427][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.100710][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.109533][ T2322] rust_binder: got new transaction with bad transaction stack [ 87.109570][ T2322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 87.117968][ T1014] usb 5-1: USB disconnect, device number 17 [ 87.127925][ T1407] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.144191][ T1407] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.154158][ T1407] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.161010][ T1407] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 87.170307][ T1407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.182703][ T1407] usb 3-1: config 0 descriptor?? [ 87.592781][ T1407] hid-generic 0003:04F3:0755.0014: unknown main item tag 0x3 [ 87.600559][ T1407] hid-generic 0003:04F3:0755.0014: failed to start in urb: -90 [ 87.613197][ T1407] hid-generic 0003:04F3:0755.0014: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 87.891399][ T2381] random: crng reseeded on system resumption [ 87.965191][ T1014] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 88.095178][ T1014] usb 5-1: device descriptor read/64, error -71 [ 88.184057][ T2389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 88.224125][ T2396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.224151][ T2396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:133 [ 88.233884][ T2396] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 88.243089][ T2396] rust_binder: Error in use_page_slow: EBUSY [ 88.253554][ T2396] rust_binder: use_range failure EBUSY [ 88.259593][ T2396] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 88.265080][ T2396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 88.273030][ T2396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:133 [ 88.345253][ T1014] usb 5-1: device descriptor read/64, error -71 [ 88.393363][ T2399] overlay: filesystem on ./bus not supported as upperdir [ 88.403518][ T2398] batadv_slave_1: entered promiscuous mode [ 88.514748][ T2410] SELinux: security_context_str_to_sid () failed with errno=-22 [ 88.570911][ T2401] batadv_slave_1: left promiscuous mode [ 88.595219][ T1014] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 88.735242][ T1014] usb 5-1: device descriptor read/64, error -71 [ 88.975288][ T1014] usb 5-1: device descriptor read/64, error -71 [ 89.094667][ T1014] usb usb5-port1: attempt power cycle [ 89.254701][ T2442] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 89.254728][ T2442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 89.263416][ T2442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:169 [ 89.288589][ T2444] futex_wake_op: syz.3.633 tries to shift op by 144; fix this program [ 89.435463][ T1014] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 89.456239][ T1014] usb 5-1: device descriptor read/8, error -71 [ 89.545179][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 89.586231][ T1014] usb 5-1: device descriptor read/8, error -71 [ 89.695205][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 89.702011][ T9] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x3 has invalid maxpacket 1535, setting to 1024 [ 89.713152][ T9] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1024 [ 89.723122][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 89.731258][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.732617][ T1407] usb 3-1: USB disconnect, device number 19 [ 89.740398][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.761163][ T9] usb 4-1: Product: syz [ 89.765840][ T9] usb 4-1: Manufacturer: syz [ 89.771694][ T9] usb 4-1: SerialNumber: syz [ 89.783243][ T2444] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 89.825237][ T1014] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 89.846255][ T1014] usb 5-1: device descriptor read/8, error -71 [ 89.976274][ T1014] usb 5-1: device descriptor read/8, error -71 [ 89.993572][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 90.004998][ T9] usb 4-1: USB disconnect, device number 25 [ 90.017776][ T2450] tipc: Started in network mode [ 90.022692][ T2450] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 90.031943][ T2450] tipc: Enabled bearer , priority 10 [ 90.095271][ T1014] usb usb5-port1: unable to enumerate USB device [ 90.519660][ T2453] rust_binder: got new transaction with bad transaction stack [ 90.519686][ T2453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:431 [ 90.592178][ T2489] @: renamed from vlan0 (while UP) [ 90.592351][ T2487] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 90.616800][ T2489] rust_binder: Write failure EINVAL in pid:433 [ 90.616881][ T2489] rust_binder: Read failure Err(EAGAIN) in pid:433 [ 90.790675][ T2512] fuse: Unknown parameter 'group_ifwgd' [ 90.875188][ T1014] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 91.007341][ T2543] overlayfs: missing 'lowerdir' [ 91.012819][ T2543] overlayfs: failed to clone upperpath [ 91.019137][ T2543] fuse: Bad value for 'group_id' [ 91.024188][ T2543] fuse: Bad value for 'group_id' [ 91.029997][ T1014] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.041757][ T1014] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.051949][ T1014] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.058962][ T1014] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 91.068311][ T1014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.082196][ T1014] usb 4-1: config 0 descriptor?? [ 91.145203][ T9] tipc: Node number set to 4269801488 [ 91.153740][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 91.153760][ T36] audit: type=1400 audit(1751325821.350:446): avc: denied { getopt } for pid=2547 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.217075][ T36] audit: type=1400 audit(1751325821.420:447): avc: denied { accept } for pid=2549 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.445216][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 91.489936][ T1014] hid-generic 0003:04F3:0755.0015: unknown main item tag 0x3 [ 91.497811][ T1014] hid-generic 0003:04F3:0755.0015: failed to start in urb: -90 [ 91.506211][ T1014] hid-generic 0003:04F3:0755.0015: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 91.596585][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.607553][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.617360][ T9] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 91.626555][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.635686][ T9] usb 3-1: config 0 descriptor?? [ 91.931401][ T2576] /dev/rnullb0: Can't lookup blockdev [ 92.043929][ T9] belkin 0003:1020:0006.0016: unknown main item tag 0x3 [ 92.051640][ T9] belkin 0003:1020:0006.0016: hidraw1: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 92.491160][ T2589] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 92.597214][ T2599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.613356][ T2601] netlink: 'syz.0.685': attribute type 27 has an invalid length. [ 92.614735][ T2599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.015114][ T2606] rust_binder: 2606: no such ref 0 [ 93.035932][ T2606] fuseblk: Bad value for 'group_id' [ 93.041154][ T2606] fuseblk: Bad value for 'group_id' [ 93.073936][ T36] audit: type=1400 audit(1751325823.270:448): avc: denied { accept } for pid=2610 comm="syz.4.689" path="socket:[18346]" dev="sockfs" ino=18346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.136840][ T2611] binder: Unknown parameter '\Upexh' [ 93.299554][ T36] audit: type=1400 audit(1751325823.500:449): avc: denied { setattr } for pid=2626 comm="syz.4.694" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.333956][ T2630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 93.333993][ T2630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:295 [ 93.343821][ T2630] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 93.353054][ T2630] rust_binder: Error in use_page_slow: EBUSY [ 93.363443][ T2630] rust_binder: use_range failure EBUSY [ 93.369526][ T2630] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 93.375211][ T2630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 93.383132][ T2630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:295 [ 93.646661][ T305] usb 4-1: USB disconnect, device number 26 [ 93.728040][ T36] audit: type=1400 audit(1751325823.930:450): avc: denied { bind } for pid=2643 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.790586][ T36] audit: type=1400 audit(1751325823.990:451): avc: denied { bind } for pid=2650 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.810794][ T36] audit: type=1400 audit(1751325823.990:452): avc: denied { name_bind } for pid=2650 comm="syz.0.704" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 93.831609][ T36] audit: type=1400 audit(1751325823.990:453): avc: denied { node_bind } for pid=2650 comm="syz.0.704" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 94.227756][ T2666] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 94.254227][ T1407] usb 3-1: USB disconnect, device number 20 [ 94.444059][ T36] audit: type=1400 audit(1751325824.598:454): avc: denied { map } for pid=2679 comm="syz.0.713" path="socket:[20563]" dev="sockfs" ino=20563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.473955][ T36] audit: type=1400 audit(1751325824.598:455): avc: denied { accept } for pid=2679 comm="syz.0.713" path="socket:[20563]" dev="sockfs" ino=20563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.528891][ T2685] overlayfs: failed to clone lowerpath [ 94.820556][ T2709] overlayfs: failed to clone upperpath [ 94.830083][ T2709] fuseblk: Bad value for 'fd' [ 94.932301][ T2717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.932391][ T2717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:187 [ 94.951596][ T2717] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 94.966520][ T2717] rust_binder: Error in use_page_slow: EBUSY [ 94.977496][ T2717] rust_binder: use_range failure EBUSY [ 94.984077][ T2717] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 94.990066][ T2717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 94.998364][ T2717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:187 [ 95.031158][ T2722] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 95.049282][ T2722] overlayfs: missing 'lowerdir' [ 95.056264][ T2722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 95.141028][ T2724] rust_binder: Failed copying remainder into alloc: EFAULT [ 95.141057][ T2724] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 95.149065][ T2724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 95.165485][ T2724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:189 [ 95.176621][ T2727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.306334][ T2739] rust_binder: Failed copying remainder into alloc: EFAULT [ 95.324387][ T2739] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 95.338824][ T2739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 95.365455][ T2739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:198 [ 95.367619][ T2744] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 95.384694][ T2744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.399398][ T2747] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 95.421560][ T2749] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 95.438990][ T2746] netlink: 5 bytes leftover after parsing attributes in process `syz.2.731'. [ 95.448016][ T2746] 0{X: renamed from gretap0 (while UP) [ 95.475303][ T2746] 0{X: entered allmulticast mode [ 95.483927][ T2746] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 95.587079][ T2760] rust_binder: 2760: no such ref 3 [ 95.728962][ T2758] can0: slcan on ptm0. [ 95.897320][ T2783] rust_binder: 2783: no such ref 3 [ 95.935130][ T2758] can0 (unregistered): slcan off ptm0. [ 96.168815][ T368] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 96.217137][ T2793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 96.329184][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 96.335413][ T368] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 96.343730][ T368] usb 4-1: config 179 has no interface number 0 [ 96.350041][ T368] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 96.361135][ T368] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 96.372418][ T368] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.383602][ T368] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 96.395036][ T368] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 96.408285][ T368] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 96.417388][ T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.426497][ T2787] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.582953][ T2816] rust_binder: Got transaction with invalid offset. [ 96.582989][ T2816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.589701][ T2816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 96.794959][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 96.794979][ T36] audit: type=1400 audit(1751325826.806:459): avc: denied { bind } for pid=2829 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.871669][ T9] usb 4-1: USB disconnect, device number 27 [ 96.871680][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 96.871712][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 96.913178][ T2837] input: syz1 as /devices/virtual/input/input9 [ 96.951672][ T2841] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 96.981849][ T2843] rust_binder: Got transaction with invalid offset. [ 96.981877][ T2843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.988658][ T2843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:477 [ 97.344846][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 97.419569][ T36] audit: type=1400 audit(1751325827.386:460): avc: denied { create } for pid=2865 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 97.464914][ T2868] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 98) [ 97.464950][ T2868] rust_binder: Error while translating object. [ 97.475655][ T2868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.481845][ T2868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 97.491837][ T2868] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 97.501222][ T9] usb 3-1: device descriptor read/64, error -71 [ 97.518182][ T2868] rust_binder: Error in use_page_slow: EBUSY [ 97.518206][ T2868] rust_binder: use_range failure EBUSY [ 97.524205][ T2868] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 97.530907][ T2868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 97.539044][ T2868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:212 [ 97.556148][ T2872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.770'. [ 97.622792][ T31] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 97.761771][ T31] usb 5-1: device descriptor read/64, error -71 [ 97.793786][ T9] usb 3-1: device descriptor read/64, error -71 [ 97.954136][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 98.018297][ T31] usb 5-1: device descriptor read/64, error -71 [ 98.050378][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 98.114660][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 98.120765][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 98.129237][ T45] usb 4-1: config 179 has no interface number 0 [ 98.135515][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 98.146847][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 98.158123][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.169292][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 98.180736][ T45] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.193994][ T45] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.200030][ T9] usb 3-1: device descriptor read/64, error -71 [ 98.203114][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.218699][ T2889] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.285578][ T31] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 98.445922][ T31] usb 5-1: device descriptor read/64, error -71 [ 98.456669][ T9] usb 3-1: device descriptor read/64, error -71 [ 98.574268][ T9] usb usb3-port1: attempt power cycle [ 98.659601][ T1014] usb 4-1: USB disconnect, device number 28 [ 98.659748][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 98.674070][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 98.702524][ T31] usb 5-1: device descriptor read/64, error -71 [ 98.820170][ T31] usb usb5-port1: attempt power cycle [ 98.937675][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 98.960146][ T9] usb 3-1: device descriptor read/8, error -71 [ 99.099169][ T9] usb 3-1: device descriptor read/8, error -71 [ 99.158371][ T2901] 9pnet_fd: Insufficient options for proto=fd [ 99.183574][ T31] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 99.200260][ T2905] overlayfs: missing 'lowerdir' [ 99.206386][ T31] usb 5-1: device descriptor read/8, error -71 [ 99.220056][ T2907] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 98) [ 99.220081][ T2907] rust_binder: Error while translating object. [ 99.231511][ T2907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.239427][ T2907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 99.249606][ T2907] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 99.260027][ T2907] rust_binder: Error in use_page_slow: EBUSY [ 99.270445][ T2907] rust_binder: use_range failure EBUSY [ 99.276555][ T2907] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 99.282077][ T2907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 99.290100][ T2907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:219 [ 99.344963][ T31] usb 5-1: device descriptor read/8, error -71 [ 99.375995][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 99.403159][ T9] usb 3-1: device descriptor read/8, error -71 [ 99.548133][ T9] usb 3-1: device descriptor read/8, error -71 [ 99.611175][ T31] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 99.644329][ T31] usb 5-1: device descriptor read/8, error -71 [ 99.675444][ T9] usb usb3-port1: unable to enumerate USB device [ 99.783308][ T31] usb 5-1: device descriptor read/8, error -71 [ 99.889137][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 99.899999][ T31] usb usb5-port1: unable to enumerate USB device [ 100.028114][ T45] usb 4-1: device descriptor read/64, error -71 [ 100.284693][ T45] usb 4-1: device descriptor read/64, error -71 [ 100.551956][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 100.690967][ T45] usb 4-1: device descriptor read/64, error -71 [ 100.722996][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 100.884795][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.892827][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 100.901302][ T9] usb 3-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 100.910418][ T9] usb 3-1: config 219 interface 0 has no altsetting 0 [ 100.911045][ T36] audit: type=1326 audit(1751325830.660:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2954 comm="syz.0.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841678e929 code=0x7fc00000 [ 100.917217][ T9] usb 3-1: config 219 interface 0 has no altsetting 1 [ 100.938223][ T9] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 100.956333][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.964530][ T9] usb 3-1: Product: syz [ 100.968883][ T45] usb 4-1: device descriptor read/64, error -71 [ 100.975358][ T9] usb 3-1: Manufacturer: syz [ 100.980157][ T9] usb 3-1: SerialNumber: syz [ 101.022375][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 101.086662][ T45] usb usb4-port1: attempt power cycle [ 101.194451][ T10] usb 5-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config [ 101.204867][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.218073][ T10] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 101.227378][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.236812][ T9] usb 3-1: selecting invalid altsetting 0 [ 101.242609][ T9] usb 3-1: selecting invalid altsetting 0 [ 101.248569][ T10] usb 5-1: config 0 descriptor?? [ 101.258626][ T9] usb 3-1: USB disconnect, device number 25 [ 101.270959][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:219.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.450168][ T45] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 101.472421][ T45] usb 4-1: device descriptor read/8, error -71 [ 101.479297][ T10] usb 5-1: string descriptor 0 read error: -71 [ 101.486118][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 101.504466][ T36] audit: type=1400 audit(1751325831.212:462): avc: denied { write } for pid=2969 comm="syz.4.807" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 101.505204][ T10] usb 5-1: USB disconnect, device number 26 [ 101.538412][ T2972] bpf: Bad value for 'mode' [ 101.538702][ T36] audit: type=1400 audit(1751325831.240:463): avc: denied { ioctl } for pid=2969 comm="syz.4.807" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 101.587733][ T2974] netlink: 'syz.4.809': attribute type 4 has an invalid length. [ 101.595647][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.609886][ T36] audit: type=1400 audit(1751325831.296:464): avc: denied { setattr } for pid=2973 comm="syz.4.809" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 101.611380][ T45] usb 4-1: device descriptor read/8, error -71 [ 101.766648][ T2986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.888325][ T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 101.910730][ T45] usb 4-1: device descriptor read/8, error -71 [ 102.049698][ T45] usb 4-1: device descriptor read/8, error -71 [ 102.059441][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 102.166334][ T45] usb usb4-port1: unable to enumerate USB device [ 102.219688][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 102.225967][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 102.237363][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57687, setting to 1024 [ 102.248592][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.257701][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.266538][ T31] usb 3-1: config 0 descriptor?? [ 102.272440][ T31] hub 3-1:0.0: USB hub found [ 102.486387][ T31] hub 3-1:0.0: 1 port detected [ 102.704133][ T2989] ------------[ cut here ]------------ [ 102.709692][ T2989] WARNING: CPU: 0 PID: 2989 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 102.719143][ T2989] Modules linked in: [ 102.723129][ T2989] CPU: 0 UID: 0 PID: 2989 Comm: syz.2.813 Not tainted 6.12.30-syzkaller-g668635cd345a #0 d19ba9d9380c3ec16bff3ad427c1e033f6258032 [ 102.736563][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.746674][ T2989] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 102.752606][ T2989] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 64 33 ee 05 00 0f 85 c4 00 00 00 c6 05 57 33 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 102.772383][ T2989] RSP: 0018:ffffc9000d3ff9a0 EFLAGS: 00010246 [ 102.778541][ T2989] RAX: 0000000000000000 RBX: 1ffff92001a7ff38 RCX: 0000000000000000 [ 102.786570][ T2989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000d3ffa48 [ 102.794576][ T2989] RBP: ffffc9000d3ffad0 R08: ffffc9000d3ffa47 R09: 0000000000000000 [ 102.802618][ T2989] R10: ffffc9000d3ffa30 R11: fffff52001a7ff49 R12: ffffc9000d3ff9e0 [ 102.810663][ T2989] R13: 0000000000000034 R14: dffffc0000000000 R15: 0000000000000000 [ 102.818804][ T2989] FS: 00007f3727df86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 102.827813][ T2989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.834469][ T2989] CR2: 000000110c29659e CR3: 000000011d024000 CR4: 00000000003526b0 [ 102.842534][ T2989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.850571][ T2989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.858576][ T2989] Call Trace: [ 102.861921][ T2989] [ 102.864912][ T2989] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 102.870597][ T2989] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 102.876385][ T2989] ? try_to_wake_up+0xe17/0x1aa0 [ 102.881369][ T2989] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 102.887603][ T2989] ___kmalloc_large_node+0x9c/0x1d0 [ 102.892852][ T2989] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 102.899050][ T2989] __kmalloc_large_node_noprof+0x1e/0xe0 [ 102.904796][ T2989] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 102.911003][ T2989] __kmalloc_noprof+0x26d/0x450 [ 102.915911][ T2989] ? __kasan_check_write+0x18/0x20 [ 102.921065][ T2989] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 102.927115][ T2989] ? __cfi_futex_wake+0x10/0x10 [ 102.931993][ T2989] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 102.938488][ T2989] ? selinux_file_ioctl+0x6e0/0x1360 [ 102.943820][ T2989] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 102.949433][ T2989] ? do_futex+0x356/0x500 [ 102.953800][ T2989] ? __cfi_do_futex+0x10/0x10 [ 102.958562][ T2989] ? __fget_files+0x2c5/0x340 [ 102.963284][ T2989] ? bpf_lsm_file_ioctl+0xd/0x20 [ 102.968291][ T2989] ? security_file_ioctl+0x34/0xd0 [ 102.973464][ T2989] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 102.979926][ T2989] __se_sys_ioctl+0x132/0x1b0 [ 102.984663][ T2989] __x64_sys_ioctl+0x7f/0xa0 [ 102.989409][ T2989] x64_sys_call+0x1878/0x2ee0 [ 102.994123][ T2989] do_syscall_64+0x58/0xf0 [ 102.998562][ T2989] ? clear_bhb_loop+0x50/0xa0 [ 103.003304][ T2989] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.009231][ T2989] RIP: 0033:0x7f3726f8e929 [ 103.013711][ T2989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.033384][ T2989] RSP: 002b:00007f3727df8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.041836][ T2989] RAX: ffffffffffffffda RBX: 00007f37271b5fa0 RCX: 00007f3726f8e929 [ 103.049882][ T2989] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000a [ 103.057916][ T2989] RBP: 00007f3727010b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.065943][ T2989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.073949][ T2989] R13: 0000000000000000 R14: 00007f37271b5fa0 R15: 00007ffe31b489e8 [ 103.082118][ T2989] [ 103.085166][ T2989] ---[ end trace 0000000000000000 ]--- [ 103.140617][ T31] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 103.147017][ T31] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 103.155876][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 103.161910][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.182235][ T31] usb 3-1: USB disconnect, device number 26 [ 103.759126][ T613] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.759181][ T53] Bluetooth: hci0: command 0x1003 tx timeout