last executing test programs: 1.725076137s ago: executing program 0 (id=861): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x41) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 1.696145558s ago: executing program 0 (id=862): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) setuid(0xee01) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000018) (rerun: 64) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@flushpolicy={0x13c, 0x1d, 0x200, 0x70bd25, 0xffff8000, "", [@proto={0x5, 0x19, 0x3c}, @srcaddr={0x14, 0xd, @in=@loopback}, @policy_type={0xa}, @sec_ctx={0xfa, 0x8, {0xf6, 0x8, 0x1, 0xff, 0xee, "6cd8e4a2dd579810d5b9553935649015236be7a7c4212d12b307ba526c4f3ecf0b8e6ac04fc9d3f7e2260da8c8b91c1e747248250bc67b695adddfe47d8dde3ff2c9b0ff7db6a964199d87fd98ee41d7a75cbcf687d3ebd95305dde9de83e691cd7f8abe1161e878a9dc3d529fd122f4f96358d8b1ba482f9923235942f81deea4d65ca4773eb7ec90ff0132edf570f1912d3b9f1ecb2066156c679b2ab9d2d0a010770725cdf91e0efb3f264f77fba03337b6af0bed5a95bbf544ef5e5326f825c0e4c17ccbe31b6a343d7331c1aa021ad107673d3d9f53ba15c2cd6d11a682a7be5fdb09cdadd4f98751f4d8ec"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24044804}, 0x40) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000480)={0x8000}) 1.644431948s ago: executing program 0 (id=863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r3, 0x0, 0x0, 0x0, 0xffffffff) (async) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x34) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4048884) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x41c201, 0x0) (rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) (async, rerun: 64) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0xffffff80, 0x8, '9P2000.u'}, 0x15) (async) dup3(r8, r8, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x54, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@weak_handle={0x77682a85, 0x1081}, @flat=@handle={0x73682a85, 0x201, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/5, 0x5, 0x1, 0xd}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) (rerun: 64) 1.587733518s ago: executing program 0 (id=867): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00007a2000/0x4000)=nil) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') pread64(r4, &(0x7f0000000180)=""/208, 0xd0, 0x5) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x5) prlimit64(r3, 0x1, &(0x7f0000000080)={0x50fb, 0x8}, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 1.525128728s ago: executing program 1 (id=873): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000000380)={0x10, 0x2c, 0x8, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x4000000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) r2 = syz_io_uring_complete(0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/171, 0xab, 0x0, &(0x7f0000000100)=""/116, 0x74}, &(0x7f00000001c0)=0x40) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000008, 0x810, r1, 0x2000) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000580)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x9b2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D\xf3\x1e,\xe6\xcfP)\x1a\x88\xd8\xb3\xc62a|\xe8\x15\x1d.\t+@[\xbd(-8w\xb7\xbe-\xc3L\x95\xc3\xd7\xcb\xc1s\n\xe3\xd6\xc7eEj\xbfP?\xe6\xc5\x8f\xfcN\xaa).- \xc5\xaf\x9enP6?\xd0\x99\x12\xe1\xcfd\xe3*\xe0J\xba!V|\xcc\xc2\xd2\xe2tl\x18Q\xdc\xdb\xf2\xcemAj\xc1\xac\x11s\xafj\xba\x1c\'\x8170\xb0b4\xb9V\v\xec5\x8aC0rU\xab\xd4n\x17s\x8b\xb1\r;f\xc3\aN2\xdb\xdb\xa95@\xfd\x9c_C\xb7I\xf5\x80X9\x10\x17\xeez\xfb1\x93d\xeb\xa7\xcbr\x04@\xf2w\xdahz\v\xe9\x15\xe8\\=\x8a\xb9\x90u\xbd\xae<\xb7\xd4WZ\xe0\x1bl\x0e\n\xdc|\a\x95\x83Wa\x0e4)\x99\x88\x87\xe1\v\xb3\x978:apC\xb79g1') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x644200, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000dc0)='\x00\x00`/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-0\x1a\r\x7f\x9fu+oB\\WJ\xe7-b%\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91\x00\x00?+E\xf0M\xad\xb8O\xd6.\x1cDh\xab\x83\xec!\xe0\xf6\x83r\x96\xd0\x99\xdf\xa8=\xd3\xe7%\x8d\x1b\xa0\x17\xce\x14\x89Nl\xecd\xbd\xe8\xa9\xac\xc9W\x82e\x9e\xee\xd0\xf4\xc2\x16T\xda\xc3P\x96\x17\xbeh\x97q\xe2\xdd\xb3\x88\xafo\xd4\x19A\xa8\xad?\a\x85\x18\x85\xca\xf0\xcf$\x83\x9d\xe4\x11\x81\x01\xae\x0e+\x0f#\xf4J\x93`\f\x8ea\xda\x95z\xad\x19\xc6fr\x81t\xd2\x99\xd8\xf7\x11rsj\x98\x89e\xe8\xcfg\xe3\xe9\x17\xc5D)v!') 1.495810339s ago: executing program 1 (id=874): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x5d, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x87, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x6, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0x0, 0x0, 0x0}) 1.445768449s ago: executing program 1 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = gettid() tkill(r3, 0x1b) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x11, 0x66, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) kcmp(r2, r3, 0x2, r4, r0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) getdents64(r6, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000005c0)=""/224, 0xf3220814b4ebc90c, 0x1400, 0x1d5, 0x1}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000080)=0x5, 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x101862, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT=r7]) 753.384044ms ago: executing program 0 (id=882): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=[@dontfrag={{0x18, 0x29, 0x3e, 0x3b}}], 0x18}, 0x4080) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 696.924775ms ago: executing program 0 (id=883): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000082505a1a440000f020b0109025c0002017f400f09040007010202000005241a"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) read(0xffffffffffffffff, &(0x7f0000000040)=""/98, 0x3a) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="08f20f8d2311118585cbf8cbf85d6b150b0000008a0f015e0066410f388274bc00400f0f01b466460b35b9fd020066baa000b81c0e2899ef3266baa000ad450f00160f07", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0xffffffe2) syz_genetlink_get_family_id$nbd(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x14) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x4) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 619.688905ms ago: executing program 1 (id=884): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1041, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c77fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x41}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000080)={0x3, 0x0, {[0x6, 0xffffffffffffffff, 0x2, 0x7, 0x1, 0x8, 0x6, 0x800003]}}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f215866b867000f00d866ba200035000000400f22c0b8add341b70f23c80f21f8350000f00066ba4100ed0f0051b1b805000000b937df00000f01d964660f38818060210000b9270200000f30c4e2e93d83081600007529", 0x58}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4200710}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x10}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) 604.314725ms ago: executing program 1 (id=885): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x79}, @void, @val={0xc, 0x99, {0xe, 0x79}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c0, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0xce}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xfe4}, {0x5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20018040}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000) r3 = syz_usb_connect$cdc_ecm(0x3, 0x66, &(0x7f0000000540)={{0x12, 0x1, 0x1, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0xf4, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xf, {{0x9, 0x24, 0x6, 0x0, 0x0, "38fe279a"}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x200, 0xd5d, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x7265, 0x1, 0x0, 0x7, 0x0, 0x8a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x34, 0x3, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0xff}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x9c, 0x8, 0xc0, 0x8, 0xf1}, 0x10f, &(0x7f0000000600)={0x5, 0xf, 0x10f, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0xd, 0x764d}, @generic={0x103, 0x10, 0xa, "a9d404c1cee052051e00ef67b502cb290c9ab1a5627db3b917a1ed970ad8b4bad3377b6e9003dfb700e2a2e933bd5503b305b64887cf8c062511e3aba679c36144c7dcb56a4b748d46aad11bc0ff03f1c68cd1587094ddfe1cd49eb2321d8ec673e55a4f6742ea91c9b8d22d59b15e64b1a33fb3daf675f3cb8f76989902f80b6379f09830fa04cd6bb965d7b44ce98257cb204d6a376c52be34dc4329716e6dcdb91da89085e986e040575bb759e3875317e77f4488281fb7cdeb6024c39cfc575f80a28560067bb74b842ee3c76da4f214f30979bf2ae8ef37132316f0e47673877654a8b41f7a6a07a6eccdc9db4705ae26c990478e08d6523c668e77324e"}]}, 0x6, [{0xa7, &(0x7f0000000740)=@string={0xa7, 0x3, "a8265a14b756de22f5b38de03e4f63335c1546e417469a8300c0a8ad8e1b471c1b0740495bec8d7d1fa948cf7b7d2a3f9446c00d52cf5ee4416ae4fb2c5c02147b5220dd585ad7122a4dc7b7a7686aa4cb5d034a3b50e10c76bb370f31124fa42f83738945a6a00273654a375b83cebdd0ead65949cd3e877590eba29c83d03ad4700ed2df415bfd807c07c75db2efbfcbd647ef76f4e0ff34a3cd383e5ee8ea32be005db4"}}, {0x1b, &(0x7f0000000800)=@string={0x1b, 0x3, "de2668a569a08208f645feee926d1e57f9cb6f521e8a0de6a7"}}, {0xec, &(0x7f0000000840)=@string={0xec, 0x3, "98e8bf25c4bde30db60e3ebfae8b436ae69094c46c667839ab27712bd65f117f90b7f7fb05706ee4b6ed8970a74002261ce17f4d7b48b1d917020c533c32919d753eb842bbe8e8af0eefd6850c88bb7aa2cf3038837e1b3b6e67a11debeca83dfb91a7a62671a1a5822cbb52ee135d90c94d2bff8578bc9dbc242b509b7b46e116ef2e570c842dcec984e361a7891f993714df1ff69cbc69374bf6d17b033aa306e3d8a0c8d1c0d674cd58e99b1577ddb178b72d3981b3ca13d29d87ebb9fc3301fcdc7844f158e40a9fc7da951fb58ae8d5c1e1c1cea3131d3a33581df1c191b5e0032569590a97cf7c"}}, {0xf4, &(0x7f0000000940)=@string={0xf4, 0x3, "fb66f138ba08520cc2f4d0e36d99c0fed01bec1f7dbcab6eaf06f98082d97285f059c79be1ca893ead7b3eb1130c2b68f01b1e337a171c3887c6a3e394c4ea0b3c55a8022665c9be8e17753bd70f50e8985dde75c406a09330301d9f2b2b0b091ef1c139dab59a1b698b356ef6523c570ce95e693cd42b987225b52d928a0c2200cb54ec761e1aaee7f64d374b36bdf5b94a5e92297205349e862e04b33326eeb7ad708e217cdf5d5afcbd72ab3e765fdffebc2cc76dff35eb1f9c94603db59249d52606a3804d57ec08f28fd49932f601055bd122fffdb4ffdd09a7195e943d885b174366c174704d5af886f2e7b8ee7a8d"}}, {0xf, &(0x7f0000000a40)=@string={0xf, 0x3, "9969360eb8e89737a35942a29e"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io(r3, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b40)={0x40, 0x31, 0xd9, {0xd9, 0xb, "b1a1cd44f30acb0fa361b0685e47f27f41cef191ab52c64b574817e891e7f19c3b09875bfca15cd11b53d647505a966fb0d6a295219eca5681eae14ccd6e272f997d321c0d3f7b067c366e9076f3b2ba3e044620a5cc38b6da805e9f737d291f9a742ea4dd80c2f37af22ea83ba4d21d4c265968e91ea291834ce87b8f88939ee4d6a7f376bf1cd62bdde0a5bbb60db5883a58ef66b88b2deb28d0dd64c70d68ec94f8b7c631da82cdec654beb1a7059873eb14c295ecf4567cdadcaf1effc6f35aee2c2ac9087ca5386d0a777b952bc0234f8b5d9db1e"}}, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000c80)={0x0, 0xf, 0x9f, {0x5, 0xf, 0x9f, 0x5, [@generic={0x6b, 0x10, 0x2, "b1a17c31182555d26e5aafb9123addfc488576cc650cf671e02794e89b4f31fe2d152093d686f378a3634f29b9feef3dcd0c80daf459b62bfc1f08a887b161dcae201829d9b735fb0ed76f61a54cbd3311b21e7840a05af266eb78077d6a1d05bc8e3cf333598f62"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x1, 0xf00, 0x0, [0xffff00, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x6, 0x1f, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0x9}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0xf2, 0x2, "d1a09efc", "5ef850d6"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x2, 0x75, 0x6, 0xd30, 0xfc11}}}, &(0x7f0000001300)={0x84, &(0x7f0000000e00)={0x0, 0x17, 0xff, "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"}, &(0x7f0000000f40)={0x0, 0xa, 0x1}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x8, 0x10}}, &(0x7f0000001040)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001080)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "f939"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001140)={0x40, 0x13, 0x6}, &(0x7f0000001180)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "e81b"}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000001240)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001280)={0x40, 0x1e, 0x1, 0xff}, &(0x7f00000012c0)={0x40, 0x21, 0x1, 0x4}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, r0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x14) r5 = socket$inet(0x2, 0x4, 0xa) close(r5) r6 = syz_open_dev$mouse(&(0x7f0000001500), 0x10001, 0x208080) ioctl$KVM_RUN(r6, 0xae80, 0x0) syncfs(r6) sendto$inet(r6, &(0x7f0000001540)="54015c24b8268fa1497c1cc9a3b00e43bbf9de23a9d68d855e594e1e2566961e270f4023725fa3b05dd8f16719542af61305ad448d4df8dad702118190d2448ec46ebff130641ab271d633832b31db62dc4436348649587fd30349d6fce59a01b9a12f5a18e969c6430a4716bec7e2561b38735b89392f98f4418ea7fbdac2908711f774357025a9100f399761e784d27af6e6f77e113015f915a4b45afd3107e6ebc5", 0xa3, 0x800, &(0x7f0000001600)={0x2, 0x4e24, @private=0xa010101}, 0x10) write$binfmt_misc(r6, &(0x7f0000001640)="489946bd512fabd08e064aeba0e75164e181dae6f53a6d247d3f35d960ee074dad1730d29a284f88fca509165158147938b8255e2b54514c7e8bc1b7298e32a678521c1a2dec3a", 0x47) read$FUSE(r6, &(0x7f00000016c0)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003740), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003780)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000003880)={'tunl0\x00', &(0x7f00000037c0)={'tunl0\x00', 0x0, 0xc0, 0x8, 0x7, 0x2, {{0x1e, 0x4, 0x0, 0x2, 0x78, 0x68, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast1, {[@noop, @timestamp_addr={0x44, 0x34, 0xba, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe09}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@loopback, 0x413f}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xd9f}]}, @ssrr={0x89, 0xf, 0x51, [@dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, @loopback]}, @ssrr={0x89, 0x1f, 0x71, [@dev={0xac, 0x14, 0x14, 0x41}, @empty, @multicast1, @loopback, @broadcast, @broadcast, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000003980)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x64, r7, 0x820, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x85}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3a}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000039c0)='/sys/kernel/oops_count', 0x20802, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000003b40)={'tunl0\x00', &(0x7f0000003a00)={'ip_vti0\x00', r8, 0x1, 0x40, 0x9b, 0xe, {{0x46, 0x4, 0x0, 0x2, 0x118, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x50, 0x3, 0x5, [{@broadcast, 0x4}, {@multicast2, 0xdf}, {@empty, 0x40}, {@empty}, {@empty, 0xfaa}, {@multicast2, 0x7}, {@multicast1, 0x1}]}, @cipso={0x86, 0x75, 0x2, [{0x1, 0x11, "e828d39bd6a43319464eb7eca75510"}, {0x6, 0xd, "e23ca228ac42b2721b7eca"}, {0x6, 0x8, "5aab454c2d5b"}, {0x2, 0xa, "eda660f0f3beacdf"}, {0x5, 0xd, "2898d79c9304fb65d3808d"}, {0x1, 0x7, "10c3903621"}, {0x1, 0xb, "6a4b706761e44e00b2"}, {0x1, 0x10, "517f2f39efedb0aebe872e17ecf8"}, {0x2, 0x5, "272299"}, {0x0, 0xb, "923f60ecea48aaa2bf"}]}, @timestamp={0x44, 0x1c, 0xf7, 0x0, 0x4, [0x5, 0x8, 0xffffff4c, 0x7ff, 0x1ff, 0xa]}, @timestamp_addr={0x44, 0x34, 0xaa, 0x1, 0x7, [{@remote, 0x7}, {@remote, 0xfffffffc}, {@loopback, 0x143}, {@local, 0x98}, {@private=0xa010102, 0x9}, {@remote}]}]}}}}}) io_setup(0x6, &(0x7f0000003b80)=0x0) r12 = eventfd2(0x8, 0x800) io_submit(r11, 0x1, &(0x7f0000003cc0)=[&(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000003bc0)="aa1e809762dd44968fbb940e6eb6577f20ab59b8bb329eb11395394a1336d08065510e7c8035b771ac85935056d8ef67cd6b97a8db8b0bfcca2aa7160354d69a3eb434a7ad3fc1b9e45a1bcb43a185bb673144584a4572bf57476bac93409b1a8dd77bc935d7ac52909298dc7841dea098141afa398b984cba89c8ad5a71da91ad74cbf39719a5b7a2e1ff06ff8ffa972d5abafecf32f3b6102ea091adadff5a10a793dd9cc4c035e7a205585c9583e7a9365d6f1a696da9dd72faa29234ae", 0xbf, 0x2, 0x0, 0x0, r12}]) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x1c}}, 0x2400c0d0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000005a80)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005a40)={&(0x7f0000003e40)={0x1bf0, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}]}]}, @NL80211_ATTR_TID_CONFIG={0x9ec, 0x11d, 0x0, 0x1, [{0x35c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x6, 0x2}, {0x5, 0xe}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {}, {0x6, 0x9}, {0x1, 0x4}, {0x6, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {}, {0x6, 0x3}, {0x3, 0x5}, {0x2, 0x2}, {0x4, 0x3}, {0x5, 0xa}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x1}, {0x1}, {0x5}, {0x2, 0x6}, {0x6, 0x7}, {0x1}, {0x7, 0x3}, {0x2}, {0x2, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0x8}, {0x4}, {0x1, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3}, {0x1, 0xa}, {0x4}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x8}, {0x2, 0x4}, {0x4}, {0x3}, {0x3, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x3}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x13}, {0x5, 0x5}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0xa}, {0x1}, {0x2, 0x2}, {0x2, 0x8}, {0x4}, {0x6, 0x9}, {0x3, 0x3}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0x7}, {0x4, 0x4}, {0x7, 0x6}, {0x6, 0x1}, {0x4}, {0x7}, {0x2, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x3}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x24, 0x2, 0x0, 0x6, 0x12, 0x2, 0x6c, 0x30, 0x24, 0x30, 0xc, 0x4, 0x36, 0x1, 0x48, 0x48, 0x2, 0x36, 0x2]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x5, 0x6c, 0x6c, 0x24, 0x48, 0x24, 0x30, 0x24, 0x5, 0x0, 0x3, 0x60, 0x76, 0x9, 0x9, 0x4, 0x24, 0x5, 0x36, 0x9]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x2}, {0x2, 0x9}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x6}, {0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0xa}, {0x7, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x3, 0x6}, {0x3, 0x6}, {}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x1}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x4, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x7}, {0x7, 0x2}, {0x2}, {0x6, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x6}, {0x6, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x2}, {0x6, 0x9}, {0x1, 0xa}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x6, 0x24, 0x1, 0x60, 0x2, 0x4, 0x1, 0x48, 0x1b, 0x6c, 0x2, 0xb, 0x16, 0x5, 0x18, 0x6c, 0x1, 0x24, 0xc, 0xc, 0xc, 0x6c, 0x4c, 0x9, 0x9, 0x18, 0x6]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x3, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x2c2, 0xe6, 0x2ef2, 0xfe00, 0x59, 0x2]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x9c67, 0xfffb, 0x8001, 0xf967, 0xdb7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2, 0x5, 0x4, 0x7, 0x6, 0x0, 0xab]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x6}, {0x0, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x7}, {0x6, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x6, 0x4}, {0x5, 0x4}, {0x6, 0x3}, {0x2, 0x6}, {0x7, 0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0xa}, {0x3, 0x6}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x2}, {0x3}, {0x4, 0x7}, {0x4, 0x6}, {0x3, 0x6}, {0x7, 0x3}, {0x4, 0x4}, {0x5, 0x3}, {0x3, 0x4}, {0x1, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x9}, {0x6, 0x10}, {0x1, 0x8}, {0x6, 0x4}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2c, 0x60, 0x48, 0xc, 0x12, 0x4ccd55e2c19dcef9, 0x3, 0x2, 0x6c, 0x0, 0x18, 0x48, 0x1, 0x5, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x1, 0x6}, {0x6, 0x9}, {0x5, 0x9}, {0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x3, 0xa}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x6}, {0x2, 0x4}, {0x3, 0x2}, {0x4, 0x9}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x8, 0x1, 0x7, 0x2, 0x60]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x6, 0x6c, 0x12, 0x6, 0x60, 0x30, 0x3, 0x5, 0x1b, 0x4, 0xb, 0x3, 0x6c, 0x6c, 0x12, 0x9, 0x9, 0x6, 0x36, 0x12, 0xb, 0x2, 0xa828d0a59e853b03, 0x1, 0x2, 0x5, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffa, 0xda1b, 0x9, 0x6, 0x1, 0x2, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xfffd, 0x0, 0x7, 0x400, 0x9, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0xc38, 0xf77a, 0xfff8, 0x1, 0xb7, 0x2, 0x4]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x3}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x4, 0x9}, {0x1, 0x8}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x6}, {0x0, 0x1}, {0x7, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x0, 0x9}, {0x5, 0x7}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x1}, {0x3}, {0x5}, {0x0, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0x3}, {0x6, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x5, 0x12, 0xb, 0x36, 0x1b, 0x3f]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x337, 0x80, 0x3820, 0x5, 0x5, 0x7]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x2fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0xa}, {0x7, 0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x3}, {0x3}, {0x6, 0x1}, {0x0, 0x6}, {0x5, 0x4}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x2, 0x5}, {0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0xa}, {0x7, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x4}, {0x7}, {0x3, 0x5}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x7, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x24, 0x18, 0xb, 0x36, 0x1, 0x24, 0x7, 0x16, 0x48, 0x60, 0x1b, 0x3, 0xc, 0x60, 0x4, 0x1, 0x19, 0x36, 0x6, 0x16, 0x60, 0x6, 0x48, 0x5, 0x60, 0x6, 0x2, 0x60, 0x30, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x4af1, 0x8, 0x0, 0x6, 0x100, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0xa, 0x3, 0x8, 0x85a, 0x6a9a, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x81, 0x101, 0x1, 0x3d23, 0x7, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x7}, {0x4}, {0x0, 0x4}, {0x2, 0xa}, {0x5, 0x6}, {0x2, 0x8}, {0x6, 0x1}, {0x7, 0x5}, {0x3, 0x8}, {0x3, 0x8}, {0x6, 0x5}, {0x1}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x1}, {0x0, 0x7}, {0x2}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0xa}, {0x2}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0xa}, {0x0, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x6, 0x7}, {}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1ff, 0x8000, 0xdd3, 0x6, 0x1, 0x3, 0x6]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x8}, {0x2, 0x2}, {0x4, 0x9}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x6}, {}, {0x5, 0xa}, {0x3}, {0x7, 0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x4, 0xa}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x6, 0x1}, {0x5, 0x6}, {0x2, 0x7}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x4, 0x3}, {}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x3}, {0x3, 0x2}, {0x7}, {0x7, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0xa}, {0x7, 0x9}, {0x2, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x3, 0x1000, 0x1, 0xb52e, 0x0, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x7, 0x3, 0x101, 0xbe6b, 0x8, 0x40]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0xe8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x7}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x3}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0x1}, {0x5, 0xa}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0xa}, {0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x9}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x6}, {}, {0x3, 0x1}, {0x1, 0x6}, {0x4, 0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x5}, {0x6, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x5, 0x4, 0xc, 0x24, 0x6, 0x5, 0x18, 0x48, 0x18, 0x6, 0x24, 0xb, 0x9, 0xc, 0x3, 0x9, 0x12, 0x3, 0x60, 0x12, 0xc, 0x36, 0x24, 0x6, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x2}, {0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {0x4, 0x9}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x5, 0x1}, {0x3, 0x9}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x4, 0x8, 0x0, 0x3, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x9, 0x18, 0x1, 0x4, 0x18, 0x3, 0x6, 0xc, 0x3, 0x3, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x1, 0xb]}]}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0xc, 0x6, 0x24, 0x6, 0x0, 0xb, 0x2a, 0x9, 0x6c, 0x12, 0x24, 0x16, 0x48, 0x48, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x44}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x282}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x48b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x390, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xee}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x354, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x2, 0xfff, 0xfff7, 0x1, 0x1, 0xa12]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0xfffd, 0x8, 0x0, 0x4693, 0x4, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1ff, 0x0, 0x0, 0x1ff, 0x582e, 0xc001, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x3}, {0x5, 0x5}, {0x2}, {0x7, 0x6}, {0x2}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x3}, {0x2, 0x3}, {0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x1}, {0x3, 0x2}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0x6}, {0x7, 0x6}, {0x4, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x451b, 0x8000, 0x6, 0x4, 0x6, 0x5, 0xff, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x0, 0x7}, {0x6, 0x4}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0x2}, {0x4, 0x1}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc199, 0x3, 0x7, 0x7, 0x0, 0x8, 0xab0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x5}, {0x6, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {}, {0x2, 0x7}, {0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x110, 0x9, 0x2468, 0x3, 0x2, 0x8, 0xe]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x7, 0xfffa, 0x5, 0x0, 0x2, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x8, 0x4, 0x9, 0x406, 0x1, 0x101]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x9d, 0x2, 0x5, 0x200, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x1, 0xb, 0x12, 0xc, 0x6, 0x1, 0x1, 0x1, 0x1, 0x30, 0x24, 0xb, 0x24, 0x24, 0xb, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff9, 0x8c66, 0xfff7, 0x4, 0x1, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x3, 0x8, 0x8, 0x8, 0x8, 0x8]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x5}, {0x6, 0x2}, {0x2, 0x2}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x4}, {}, {0x5}, {0x0, 0xa}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x2, 0xa}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0x5}, {0x1, 0x2}, {0x2, 0x4}, {0x2, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x1}, {0x2, 0x6}, {0x0, 0x6}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x5}, {0x2, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0x5}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x4}, {}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x8, 0x7, 0xd9ef, 0x2a5, 0x9e, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xd6ecd6221338c5ca, 0x48, 0x60, 0x1b, 0xc, 0x6, 0x48, 0x30, 0x4, 0x30, 0xc, 0x18, 0x60, 0x36]}]}, @NL80211_BAND_6GHZ={0x12c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40, 0x3, 0x200, 0x9, 0x4, 0xf41, 0x600]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8, 0x8, 0x5, 0xf, 0x7, 0xff0e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xc6dc, 0x3ff, 0x10, 0xfff9, 0x8, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x6, 0x5}, {0x6, 0x2}, {0x1}, {0x0, 0xa}, {0x7, 0x6}, {0x5, 0x1}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x6}, {0x7, 0x3}, {0x5, 0x3}, {}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x2, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0x7}, {0x4, 0x4}, {0x6}, {0x2, 0x5}, {0x6, 0x5}, {0x7, 0x9}, {0x5, 0x2}, {0x2, 0x9}, {0x5, 0x1}, {0x3, 0xa}, {0x5, 0x1}, {0x2, 0x5}, {0x5, 0x1}, {0x2, 0x8}, {0x5, 0x2}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x6}, {0x2, 0x2}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0x4}, {0x6, 0x5}, {0x1}, {0x6}, {0x7, 0x6}, {0x7, 0x2}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x3}, {0x7}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0x8}, {0x2}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x7}, {0x4, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x3, 0x7}, {0x5, 0x3}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x2}, {0x5, 0x5}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x7, 0xa}, {0x6, 0x6}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x6, 0x8}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x3, 0x5}, {}, {0x1}, {0x4}, {0x2}, {0x5, 0x3}, {0x2, 0x6}, {0x6, 0x9}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x5}, {0x3}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0xa}, {0x1}, {0x2, 0x5}, {0x7, 0x5}, {0x4, 0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x7}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x4}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x6}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x7}, {0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf, 0x5, 0x7, 0xe, 0xc, 0x1, 0xb26]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x274, 0x11d, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x22c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x9}, {0x6, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x5}, {0x3, 0x6}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x4}, {0x7}, {}, {0x7, 0x6}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0xa}, {0x4, 0xa}, {0x1}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x1, 0x0, 0x5, 0x89, 0x800, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0x1, 0x4, 0x8, 0x3, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x7}, {0x5, 0x7}, {0x3, 0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x5, 0x6}, {0x4, 0x9}, {0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x1, 0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0x8}, {0x5, 0xa}, {0x2, 0x1}, {0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x6}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0xa}, {0x3, 0x7}, {0x5, 0x8}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x1ff, 0x9, 0xf959, 0x0, 0x4, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1, 0x3, 0xc, 0x9, 0x1000, 0x5, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8d, 0x4, 0x98, 0x0, 0xfffa, 0x4, 0x4, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x6}, {0x6, 0xf}, {0x7, 0x8}, {0x5, 0x5}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0x6}, {0x7, 0x6}, {0x7, 0xa}, {0x3, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x0, 0x9}, {}, {0x3, 0x2}, {0x7}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {}, {0x6, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x7, 0x3}, {0x2, 0x3}, {0x5, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x5}, {0x3, 0x5}, {0x3}, {0x5, 0x5}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x4, 0x4}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x1, 0xfffe, 0x5, 0x26, 0xfff, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7, 0x1, 0x9, 0x6, 0x74b, 0x8, 0x30da]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x11}, {0x1, 0x5}, {0x6}, {0x2}, {0x4, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x4, 0x8}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x2}, {0x5}, {0x6, 0x2}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x2}, {0x3, 0x6}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x4}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x5}, {0x4, 0x2}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x8}, {0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xa8, 0x1, 0x6, 0x4, 0x66, 0xfffc, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x80, 0xd, 0x8, 0x9, 0x0, 0x7, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a4, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x5, 0x0, 0x11, 0x36, 0xc]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x8}, {0x1, 0x3}, {0x4, 0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0x3}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x9}, {0x4}, {0x1, 0x4}, {0x1, 0x8}, {0x4, 0x4}, {0x5, 0x1}, {0x3, 0x2}, {0x6, 0x8}, {0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0x6}, {0x3, 0x9}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d07, 0x4, 0x0, 0xf, 0x6, 0x4, 0xfffe, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x2}, {0x0, 0x5}, {0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x4, 0x3}, {0x6, 0xa}, {0x1, 0xa}, {0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x4, 0x8}, {0x0, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f4, 0x11d, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x979d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xfff7, 0x7, 0x4, 0x1, 0x100, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x9, 0x8, 0x0, 0xc, 0xbd76, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0xb1c0, 0x7, 0x8, 0x6067, 0x80, 0xfff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43, 0x0, 0x114, 0x8, 0x0, 0x1, 0xffff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x224, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x6}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x6}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x7}, {0x6, 0x7}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa402, 0x7, 0xd8, 0x3ff, 0xfff9, 0x1e00, 0x0, 0xbfab]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31ec, 0x5, 0x401, 0x0, 0x1, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x40, 0x4, 0xa, 0x0, 0x3ff, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x7}, {0x6, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x7, 0x6}, {0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x2}, {0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0x7}, {0x6, 0x2}, {0x0, 0x5}, {0x4}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x2, 0x7}, {}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x7}]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x0, 0x8c, 0x9, 0xd, 0x7, 0xb2b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0xffff, 0x80, 0x6, 0x5, 0x800, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x2}, {0x7, 0x3}, {0x3, 0x7}, {0x1, 0x7}, {0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0x6}, {0x4, 0x1}, {0x6}, {0x5, 0x5}, {0x2}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0xa}, {0x2, 0x8}, {0x4}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x9}, {0x7, 0x5}, {0x6, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x0, 0x3}, {}, {0x7, 0x3}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0x7}, {0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0xa}, {0x7}, {0x6, 0x2}, {0x2, 0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x4, 0x2}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x1}, {0x3, 0xa}, {0x7, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x10}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x8}, {0x4, 0x2}, {0x7, 0x1c}, {0x0, 0xa}, {0x5, 0x3}, {0x0, 0x4}, {0x5}, {0x7, 0xa}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x5, 0x1}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x2}, {0x2, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x4}, {0x3, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x48e, 0xb, 0x386a, 0x2, 0x6, 0x8001, 0x2, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x7}, {}, {0x7, 0x3}, {0x1, 0x4}, {0x3}, {0x3, 0x4}, {0x7, 0x5}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {}, {0x7, 0x6}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x6, 0x5}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x3, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {0x2, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x1}, {0x3, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x2, 0x6}, {0x7}, {0x1, 0xa}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x0, 0x61b4, 0x5, 0x6, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xed, 0x3, 0x3, 0xfffa, 0xcd, 0x33ec, 0x6a4f, 0x8]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x264, 0x11d, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x21}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9a2f, 0xf1d0, 0xd, 0x8000, 0x1, 0x7, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xff}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x460}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x0, 0x5, 0x9, 0xb, 0x60, 0x12, 0x60, 0xc, 0x9, 0x0, 0x12, 0x60, 0x9, 0x1, 0x36, 0x36, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8dd, 0x4, 0x100, 0x6, 0xa, 0x9, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x1}, {0x1, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x4}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x5, 0xc, 0x6, 0x9, 0x9, 0xc, 0x1b, 0x5, 0x18, 0x3b, 0x30, 0x9, 0x12, 0x6, 0xc, 0x48, 0x12, 0x30, 0xf, 0x9, 0x3, 0xc, 0x9, 0x36, 0x6, 0x1, 0x30, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x18, 0x1, 0x11, 0x5, 0x19, 0x60, 0x24, 0x36, 0x4, 0x2, 0x60, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfffe, 0x6, 0x0, 0x8001, 0x8, 0x38, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x18, 0x7f, 0xff, 0xb4, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x24, 0x6, 0x1, 0x9, 0x24, 0x6, 0x4, 0x3, 0x2, 0x30, 0x2, 0x12, 0x16, 0x16, 0x2, 0x3, 0x9, 0xc, 0x3, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x5, 0xfff, 0x8001, 0xe, 0x0, 0x4615]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x16, 0xc, 0xc, 0xc, 0x1, 0x0, 0x16, 0x1, 0x36, 0x0, 0x2cc6a45fc29c870b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}]}]}, @NL80211_ATTR_TID_CONFIG={0x320, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc2d}]}, {0x4}, {0x300, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3, 0x1ff, 0x8001, 0xdeb6, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4}, {0x7, 0x4}, {0x2, 0x7}, {0x3, 0xa}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x2, 0x6}, {0x3, 0x8}, {0x5, 0x1}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x7}, {0x6}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {}, {0x7, 0xa}, {0x5, 0x9}, {0x4, 0xa}, {0x1, 0x3}, {0x3}, {0x1, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x1, 0x5, 0x24, 0x1, 0x1b, 0x16, 0x6, 0x1b, 0x1, 0xc, 0x60, 0xb, 0x0, 0x1b, 0x24, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8, 0xffff, 0x0, 0xb, 0x8, 0xfe09, 0x2930]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x36, 0x48, 0x60, 0x36, 0x30, 0x16, 0x1b, 0x24, 0x36, 0x6, 0x24, 0x4, 0x1b, 0x24, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0xffff, 0xed, 0x0, 0x2, 0x5, 0x7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x12, 0x6, 0xb, 0x60, 0x9, 0x16, 0x1, 0x1b, 0x29, 0x24, 0x18, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x1b, 0x1, 0x2, 0x6, 0xb, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd7, 0x7, 0xffff, 0x7, 0x3, 0xa21d, 0x800]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xa, 0x8, 0x6, 0x5, 0x62, 0xec7, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x2, 0x60, 0x55, 0x30, 0x24, 0xb, 0x2, 0x30, 0x30, 0x16, 0xb, 0x30, 0x12, 0x1b, 0x36, 0x12, 0x9, 0x6]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x2, 0x5, 0x4, 0x10, 0xff, 0xfffe, 0x4596]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0xff, 0x7f, 0x8000, 0x4, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x3, 0xfaeb, 0x7, 0xfdd, 0x6000]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x3, 0x9, 0x47]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x5, 0x18, 0x3, 0x24, 0x2, 0x18, 0x9, 0xb, 0x16, 0x36, 0x6c, 0x60, 0xc, 0x6, 0x16, 0x18, 0x18, 0x18, 0x8, 0x16, 0x60, 0x18, 0x0, 0x30, 0x48, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xfe00, 0x0, 0x100, 0x1, 0x800, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x6, 0xbf9, 0x7, 0x7]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x1, 0xc, 0x24, 0x24, 0x9, 0x36, 0x5, 0xc, 0x5, 0x0, 0x60, 0x4, 0x6c, 0x48, 0x1b, 0x6, 0x1, 0x2, 0x36, 0x1, 0x1, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4c3, 0x9, 0x10e1, 0x8000, 0x6, 0x3, 0x8, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x2432, 0x100, 0xffff, 0x7, 0x2, 0x5, 0x7]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xcace, 0x4, 0x8, 0x3, 0x7, 0x1, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1b, 0x0, 0xfeff, 0x7, 0xfff7, 0x0, 0x48b, 0xfe00]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x3ff, 0x6, 0xba, 0x5, 0x800, 0x401]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x534, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x36}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x200, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x4}, {0x6, 0x7}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0x8}, {0x2, 0x3}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x9}, {0x7, 0x2}, {0x5}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x2}, {0x6}, {0x3, 0x2}, {0x2}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {}, {0x5, 0x6}, {0x5, 0xa}, {0x2, 0x8}, {0x6}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x4, 0x2}, {0x1}, {0x2, 0x8}, {0x2, 0x3}, {0x3, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x5f, 0x3, 0x8, 0x100, 0x0, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x4, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x6, 0x18, 0x30, 0x36, 0x4, 0x18, 0x30, 0x3, 0x1, 0x5, 0x48, 0x36, 0x3, 0x4, 0x6c, 0x24, 0x1b, 0x1, 0x9, 0x1b, 0x6, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb9f9, 0x0, 0xd37, 0x1ff, 0x0, 0x1, 0x14]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x60, 0x9, 0x24, 0x60, 0x1b, 0x30, 0x5, 0x3, 0x60, 0x4, 0x16, 0x60, 0x6c, 0x1b, 0x6, 0x60, 0x60, 0xb, 0x6c, 0x3, 0x16, 0xb, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x48, 0x4, 0x36, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6c4, 0xfff6, 0x5, 0xe2, 0x6, 0x3ff, 0x7fff, 0x80]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x5, 0x7}, {0x1}, {0x5, 0x4}, {0x1}, {0x5, 0x5}, {0x7, 0x7}, {0x2, 0x1}, {0x2, 0x4}, {0x6, 0x8}, {0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x7, 0x7}, {0x1, 0x6}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0xa}, {0x3, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x3, 0x2d17, 0x9, 0x2, 0x990a, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x31, 0x2, 0x1b, 0x1b, 0x6, 0x1, 0x9, 0x5, 0x36, 0x5, 0x4, 0x18, 0x2, 0x14, 0x48, 0x12, 0x18, 0x1b, 0x3, 0x16, 0x9, 0x18, 0x12, 0x24, 0x6, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xc62a, 0x4, 0x800, 0x7, 0x10, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x94, 0x1, 0xc, 0x1, 0x3b3e, 0x0, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xed, 0xd, 0x9, 0xbe8e, 0x5, 0x7, 0xffff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x18, 0xb, 0x3, 0x30, 0x0, 0xb, 0x60, 0x2, 0x9, 0x48, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3, 0x7, 0x3, 0xc, 0x9e3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0xfac, 0x8, 0x1, 0xb, 0x2, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7f, 0x3, 0x3, 0xce, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x4}, {0x3, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0xa}, {}, {0x1, 0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x4, 0x9}, {0x7, 0xa}, {0x7, 0x8}, {0x6}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x2}, {0x5, 0x3}, {0x6, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x1}, {0x2, 0x5}, {0x5, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x1, 0x0, 0x3, 0x4, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xa6, 0x3ff, 0x1, 0x1, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0x7, 0x400, 0x3, 0x4, 0x3, 0x1, 0xb]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd39b, 0x6, 0x3, 0x4, 0x6, 0xc5b8, 0x1, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3da3}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x7}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0x3}, {0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x2}, {0x6}, {0x4, 0x6}, {0x2, 0x5}, {0x4, 0x8}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x4, 0x5}, {0x3, 0x9}, {0x3, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x5, 0x1}, {0x6}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x4}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x8, 0x2000, 0x36, 0x401, 0x9, 0x398]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe3b5, 0x8, 0x3, 0x2, 0x86, 0xfffe, 0x5, 0xd4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x30, 0x24, 0xb6b8c625341d82d9, 0x6, 0xb, 0x12, 0x60, 0x18, 0x2, 0x48, 0x6, 0x1, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8f0, 0x7f, 0x9, 0x8, 0xf, 0x3, 0x23bd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x66, 0x9, 0x2, 0x3, 0x7f, 0x1ff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x3dba, 0x9, 0x4, 0x400, 0x3, 0x82]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc274, 0x8, 0x5, 0x5, 0xec8, 0x5b5, 0x5757, 0x1]}}]}]}]}]}]}, 0x1bf0}, 0x1, 0x0, 0x0, 0x40004}, 0x800) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000005bc0)={&(0x7f0000005ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b00)={0x4c, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2be402a0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10}]}, 0x4c}}, 0x4084) 480.134546ms ago: executing program 2 (id=887): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') preadv2(r1, &(0x7f0000002600)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1, 0x1, 0x8, 0x8) read$FUSE(r1, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000558000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r0, &(0x7f0000000400)="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", 0x1f000) 416.942297ms ago: executing program 2 (id=888): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x98d02, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x8}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) recvmmsg(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 349.351017ms ago: executing program 2 (id=889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000085) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000200)=""/198) 287.315628ms ago: executing program 2 (id=890): quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0xee01, &(0x7f0000000000)='./file0\x00') memfd_secret(0x80000) (async) r0 = memfd_secret(0x80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x88, 0x0, &(0x7f0000000140)=[@exit_looper, @register_looper, @register_looper, @increfs_done={0x40106308, 0x1}, @release={0x40046306, 0x1}, @release={0x40046306, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x8, 0x0, 0x8}, @flat=@binder={0x73622a85, 0x29840b112f77d481, 0x3}, @fda={0x66646185, 0x5, 0x0, 0x8}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x3}], 0x69, 0x0, &(0x7f0000000200)="dbac21c995ce5b5a73f647d766d46ead8a578ee481fbe4f78108682ab8322772838486c64f10ba7282e78727fe52e0894fad1a6a5394f26196396de9800467d0ecdbbc8aa61731861752cdd2f702860fb5aed3fb18cd920e0dc39ab4d4c2d302797547013a4778f4d0"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) dup(r2) (async) r3 = dup(r2) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x25a, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4000000) fcntl$setstatus(r3, 0x4, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x110, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4de}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x9b6b}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22a692b0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000080}, 0x4800) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x110, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4de}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x9b6b}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22a692b0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000080}, 0x4800) write(r3, &(0x7f0000000680), 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000006c0)) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000006c0)) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000740)=[@text16={0x10, &(0x7f0000000700)="0f320f22e20f2351660f3809647c660f388268adea11965d000f060f015fd4ea02002601baa00066ed", 0x29}], 0x1, 0x0, &(0x7f0000000780)=[@efer={0x2, 0x8200}, @cstype3={0x5, 0x6}], 0x2) (async) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000740)=[@text16={0x10, &(0x7f0000000700)="0f320f22e20f2351660f3809647c660f388268adea11965d000f060f015fd4ea02002601baa00066ed", 0x29}], 0x1, 0x0, &(0x7f0000000780)=[@efer={0x2, 0x8200}, @cstype3={0x5, 0x6}], 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r3, 0xca185000) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r3, 0xca185000) ftruncate(r3, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x180, 0x12, 0x8, 0x70bd2d, 0x25dfdbff, {0x25, 0xe, 0x0, 0x5, {0x4e20, 0x4e20, [0x8, 0x7, 0x85, 0x5], [0xc, 0x0, 0x5, 0x9], r6, [0x9, 0x800]}, 0xffff, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "482642ffea0d71c98fbc78afc8d98d617f0a097edd61e3e1e61a722b18192d26bf56951c843dcd7e50f1017e41e8c22ecfe09dd3308b617e4aae02525c94ba052debbf1577a2960386f5e2c7cb126ec05a495ffe6a1e3a5fc47e12ddffc7eebdb2ace1f8b705fde68d1e17485039b481b9bf006454fa08041e"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "2c09a4ded5f60dc883092a0837c5c818503e29d7ed67660e1130fb523fc6dfe1c8fd40fd74115489020e9a1dbd75652ee70f2ee12177ac358cf1f2ea7b4aaff042ff7a0fc3b3341587dad9c8ac091e0bcd57ffba99cb04721f3154cff177d630eb90e30547e930e69039ef0bb083e6e3a16a35b91039a6f7262b400903bce872acb07c3f842d22e733ec5dad343ff1f154cc01506ab635e0bab344985fd9c530c5b158e155c778315a6e1e58fee4"}]}, 0x180}, 0x1, 0x0, 0x0, 0x8804}, 0x20040000) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), r3) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r0) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x164, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7b}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40884}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001000)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1d4, r10, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x45}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x19ec}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc89}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x400, 0x6, 0x2, 0x453, 0x7d, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xc4dc, 0x42, 0xffff, 0xc3a4, 0x6ecc, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x1, 0x9, 0x9, 0x7, 0xfff, 0x7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x4}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x40, 0x1c28, 0x0, 0x0, 0x120, 0xffff, 0xfff7]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x9, 0xfff8, 0xffff, 0xfff, 0x3, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xbef, 0x400, 0x2a89, 0x0, 0x29, 0x7ff, 0x7]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x1b, 0x4, 0x6, 0x4, 0x6, 0x18, 0xc, 0x9, 0x5, 0x60, 0x4e, 0x36, 0x50d93b6ae8f8d385, 0xc, 0x6, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x0, 0xee, 0xffff, 0x4, 0xfb, 0xf71a, 0x7]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa444, 0x6, 0x8, 0x0, 0x9, 0xcb, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xfffa, 0xbb0c, 0x7e8, 0x3, 0x7cff, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x2, 0x76, 0x48, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20810}, 0x20000040) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001000)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1d4, r10, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x45}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x19ec}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc89}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x400, 0x6, 0x2, 0x453, 0x7d, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xc4dc, 0x42, 0xffff, 0xc3a4, 0x6ecc, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x1, 0x9, 0x9, 0x7, 0xfff, 0x7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x4}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x40, 0x1c28, 0x0, 0x0, 0x120, 0xffff, 0xfff7]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x9, 0xfff8, 0xffff, 0xfff, 0x3, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xbef, 0x400, 0x2a89, 0x0, 0x29, 0x7ff, 0x7]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x1b, 0x4, 0x6, 0x4, 0x6, 0x18, 0xc, 0x9, 0x5, 0x60, 0x4e, 0x36, 0x50d93b6ae8f8d385, 0xc, 0x6, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x0, 0xee, 0xffff, 0x4, 0xfb, 0xf71a, 0x7]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa444, 0x6, 0x8, 0x0, 0x9, 0xcb, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xfffa, 0xbb0c, 0x7e8, 0x3, 0x7cff, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x2, 0x76, 0x48, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20810}, 0x20000040) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001200)={&(0x7f0000001140), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x40, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000001240)=@gcm_128={{0x303}, "025925c70a2b5b13", "2703aaebce2fad0758471c97982b8ca3", "f560b394", "136a02c60ca23db3"}, 0x28) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7}, {0x9, 0x2}, {0x3, 0x4}, {0x3, 0x3}, {0xd, 0x6}], "518421eb4298556c"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x1}, {0xf7, 0x6}, {0x3, 0x5}, {0x8, 0x7}, {0x5, 0x3}, {0x2, 0x2}, {0xa}, {0x5, 0x5}, {0x4, 0x7}, {0x88, 0x2}], "99d711087069c02c"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x91) 285.115018ms ago: executing program 3 (id=891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46"], 0x78) close(r1) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x2a, 0x4) mmap(&(0x7f00001a4000/0x4000)=nil, 0x4000, 0x0, 0x20c44fb6edc09a38, r0, 0x583e0000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 283.797628ms ago: executing program 2 (id=892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) (async) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f0000000400)="421d9900", 0x5e0, 0x4004, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0xe0}, 0x14) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) (async) r7 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x3) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa) (async) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"]) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="3b00000000000000400101c0"]) (async) write$char_usb(r9, &(0x7f0000000100)="305bb149e448cdcaeec6b0885b62b70e8f881fc5850fcd9f1f03eb72c235d5d2fdf4b9ae948d053cf769f50f9ca497dcc6ae71c3e6e26676b16e4e191475ead7565a07643240521ed72f8f5cf311d4800612a96cb46b2d15daf2f200d877a05f4d954e81c08dfe14ab9d440b806e956331118cf4dc36a78563", 0x79) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f00000000c0)) r10 = epoll_create(0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) epoll_pwait(r10, &(0x7f0000000280)=[{}], 0x1, 0x8, 0x0, 0x0) (async) ioctl$EVIOCSCLOCKID(r1, 0x40084503, &(0x7f0000ffcffc)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) 224.982628ms ago: executing program 3 (id=893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc, &(0x7f0000000080)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, r1, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 222.671748ms ago: executing program 3 (id=894): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x12, r0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x0, r2, 0x0, 0x8, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800f600", @ANYRES16=r3, @ANYBLOB="05072fbd7000fedbdf250100000004000300"], 0x18}, 0x1, 0x0, 0x0, 0x40008d0}, 0xd0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000b0000/0x2000)=nil, 0x2000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r4, &(0x7f0000000040), 0x0) 175.888209ms ago: executing program 2 (id=895): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x20008000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2d, 0x0, 0x1000000) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x8010) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r3, 0x22e7c000) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x31, 0x2f, 0x26, 0x40, 0x2a39, 0x3fa0, 0x6301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xb4, 0x1c}}]}}]}}, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000000c0)=""/233) 137.320989ms ago: executing program 3 (id=896): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0), 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x18c0}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x5c, r6, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYBLOB="c43279142ca0a006e269e0efe97b9f1351f6c23a02f4f1175bf8669ad61729c2e1b8a6e262fb6699f7127c1c5ff6331706ec", @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 60.564039ms ago: executing program 3 (id=897): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x77}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x2b, 0x5, 0x100, 0xf54, 0x6, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7}}, 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000002280)={0x5, 0x4, 0x0, 0xfffffffd, 0x1, 0x0, [{0x10, 0x6, 0x5, '\x00', 0x681}]}) r3 = dup(0xffffffffffffffff) recvmsg$inet_nvme(r3, &(0x7f00000047c0)={&(0x7f0000002300)=@ax25={{0x3, @null}, [@null, @default, @default, @bcast, @null, @null, @netrom, @null]}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000002380)=""/171, 0xab}, {&(0x7f0000002440)=""/211, 0xd3}, {&(0x7f0000002540)=""/63, 0x3f}, {&(0x7f0000002580)=""/159, 0x9f}, {&(0x7f0000002640)=""/66, 0x42}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004740)=""/98, 0x62}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000004800), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000004900)={'tunl0\x00', &(0x7f0000004880)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x4d, 0xe5a, {{0xb, 0x4, 0x1, 0x2, 0x2c, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x18, 0x3, 0x7, [{@multicast2, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000004a40)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004a00)={&(0x7f0000004940)={0xbc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x91) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000004a80)={0x1d, r4}, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000004ac0)={{r1}, 0x80, 0x5, 0x3}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000004b00)=r4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000004b40)) getdents64(r0, &(0x7f0000004b80)=""/76, 0x4c) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000004c00)={0x2, 0xa1, "216d7482562d708c30ca5d3ce435862e3ea9b07af3868959476bb79e52d2cbb2c9d6d109c41949573c36997f89d27b6b13f11432c7d089e965185d33ac5b731aa09b7c06bc370f1ba348ec986acd55c71d412afe8e21c40a70b5d3bb081ed303dd0b1be95381461fb31bb86b3b6f57ed01a7ddae3f33dcc0a45df399c85bc68049ef41317c7baafa8994e4055c8b98a058cecb23b01bae7ca97c02549542dfc898"}) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000004cc0)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004d40), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000004e40)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d80)={0x64, r7, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff5f1e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) connect$inet6(0xffffffffffffffff, &(0x7f0000004e80)={0xa, 0x4e22, 0x5, @mcast1, 0x6}, 0x1c) mount$9p_fd(0x0, &(0x7f0000004ec0)='./file0\x00', &(0x7f0000004f00), 0x2000, &(0x7f0000004f40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@noextend}, {@cachetag={'cachetag', 0x3d, 'macsec0\x00'}}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@pcr={'pcr', 0x3d, 0x7}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '\'[)'}}, {@obj_user={'obj_user', 0x3d, 'l2tp\x00'}}, {@subj_type={'subj_type', 0x3d, '}(:-{#[#\'}%'}}]}}) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000005040), &(0x7f0000005080)={'L+', 0x5}, 0x16, 0x3) execve(&(0x7f00000050c0)='./file0\x00', &(0x7f0000005200)={[&(0x7f0000005100)='-[\x00', &(0x7f0000005140)='\x14{\\{}\x00', &(0x7f0000005180)='wfdno', &(0x7f00000051c0)='\x00']}, &(0x7f00000053c0)={[&(0x7f0000005240)='mask', &(0x7f0000005280)=',\x00', &(0x7f00000052c0)='/\\^f%@\xde&\x00', &(0x7f0000005300)='\xcb^\x84\x00', &(0x7f0000005340)='[\x00', &(0x7f0000005380)='\x00']}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000005640)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005600)={&(0x7f0000005440)={0x1b8, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xa}}}}, [@NL80211_ATTR_TID_CONFIG={0x154, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x1, 0x1, 0x3ff, 0x3, 0xe242, 0x2]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9792, 0x4, 0x8, 0x2, 0x8001, 0x1000, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x8, 0xfff8, 0x7, 0x800, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x8000, 0x8, 0xd, 0x8, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x11c0, 0xffff, 0xffff, 0xcaf2, 0x1, 0x3, 0x8, 0xfffb]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0xa}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x7}, {0x6, 0x6}, {0x3}, {0x2, 0x5}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x9}, {0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x1, 0x1}, {0x4, 0x8}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x2}, {0x3}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x4}, {}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x8}, {0x3, 0xa}, {0x2, 0x2}, {0x7, 0x8}, {0x4, 0x4}, {0x7}, {0x3}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xc, 0x56, 0x47, 0x24, 0x2]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x6000001}, 0x4000000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000005680)={@id={0x2, 0x0, @a}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000056c0), r6) pread64(0xffffffffffffffff, &(0x7f0000005740)=""/251, 0xfb, 0x1) 59.898599ms ago: executing program 3 (id=898): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000001c0)) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8001a) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="0326ef41d715c122be34bede4c94c89ad16c60b671d578d672dadb826de11219f7723862bc5c6b1cca067defd813c46f8ecf269de5d25ab691259c8dd5ed0cce82aa89e8358a83ebe6d880cf234dfa284e60ab6e7b6aba7fe6f90eeb97fecbbfa9e483", @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRESDEC=r4, @ANYRESOCT=r3, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r2, @ANYRESDEC], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="003007000000b095594ef163"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40010100000088b04329f7a7729d7a5a6903b796f19c0830c6159708593a0fbc35a351bf926b4beef67f5dade8c1fa2f33b1a24ac92bd74c2a76c5408710a607e60eef888fea60508223cdf57d98f8bea17b92"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000e00)={0x84, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x7, 0x2, 0xfffc}, 0x0, 0x0, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @broadcast}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20000) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000100)={0x1, 0x41, &(0x7f0000000380)="029769ad0e48636fb8ea7458149f7b1f28b6fbe31a31acfd2b12169e9df8e3650366aa79e604c0da79681284e918aa7cd5b84bde1b95d72b505e89ca19d7474f6d"}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[], 0x60}}, 0x80d9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r9, 0x5409, 0x0) clock_gettime(0x0, &(0x7f0000000200)) 0s ago: executing program 1 (id=899): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}]) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c142, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@in_dx={0x82, 0x20, {0xc781}}, @set_irq_handler={0xbe, 0x20, {0x4b, 0x1}}, @rdmsr={0x32, 0x18, {0x3a8}}, @rdmsr={0x32, 0x18, {0xb26}}, @wr_drn={0x6e, 0x20, {0x6, 0x10000000000}}, @in_dx={0x82, 0x20, {0x9, 0x4}}, @set_irq_handler={0xbe, 0x20, {0x89, 0x2}}, @wr_crn={0x46, 0x20, {0x4, 0x7}}, @wr_drn={0x6e, 0x20, {0x7, 0x5}}, @wrmsr={0x1e, 0x20, {0x396, 0x5}}, @out_dx={0xaa, 0x28, {0x9e5d, 0x5, 0x4}}, @wr_crn={0x46, 0x20, {0x4, 0x4}}, @out_dx={0xaa, 0x28, {0x5a3d, 0x0, 0x8}}, @in_dx={0x82, 0x20, {0x1009230, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0x100000004}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x61, {"c4a27d78f7c744240071000000c744240281d00000ff2c2466440f38101ec4e131ec9e00000000470f01c326672e0fc71d00000000c402a5dc202e6467662e3626f30f21cc460f211f66ba2000b008ee"}}, @rdmsr={0x32, 0x18, {0x262}}, @wr_drn={0x6e, 0x20, {0x6, 0x2}}, @uexit={0x0, 0x18, 0x9}, @in_dx={0x82, 0x20, {0x21b1, 0x1}}], 0x2c9}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0xfffffffd, 0x0, 0x2, 0x256}, &(0x7f0000c57000), 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f0000001b00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000040)="23f4cabebecd5b1cb61284870d8e9572c7933c7f6e9e4be239818142b73ab015", 0x20, 0x6}]) ioctl$UFFDIO_ZEROPAGE(r4, 0xc018aa06, &(0x7f0000000380)={{&(0x7f0000411000/0x1000)=nil, 0x1000}}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001400)=ANY=[@ANYBLOB="00000000e942000032002cc1a555dd9b198a763afc759ef720e819167637141219e3f50a3ff74e84f029cbf397de458779019ee298a2e6973680bc0ce4013723a0e0f5b89290d2f45cc6ae9440c835f21b51f83bae212bc94ce3a1fbea0b1c44fb3a117f6ac04a6c41790798c6d7b0"]) write(r2, &(0x7f0000000400)="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", 0xfffffcf1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 24.500578][ T282] cgroup: Unknown subsys name 'net' [ 24.506265][ T36] audit: type=1400 audit(1762777871.720:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.529035][ T282] cgroup: Unknown subsys name 'devices' [ 24.529261][ T36] audit: type=1400 audit(1762777871.720:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.556845][ T36] audit: type=1400 audit(1762777871.720:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.730808][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.736429][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.891005][ T36] audit: type=1400 audit(1762777872.110:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.914235][ T36] audit: type=1400 audit(1762777872.110:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.931515][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.939258][ T36] audit: type=1400 audit(1762777872.110:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.970820][ T36] audit: type=1400 audit(1762777872.160:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.996221][ T36] audit: type=1400 audit(1762777872.160:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.006444][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.021859][ T36] audit: type=1400 audit(1762777872.220:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.056116][ T36] audit: type=1400 audit(1762777872.220:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.877802][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.885054][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.892438][ T292] bridge_slave_0: entered allmulticast mode [ 25.898911][ T292] bridge_slave_0: entered promiscuous mode [ 25.906579][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.913667][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.920814][ T292] bridge_slave_1: entered allmulticast mode [ 25.927054][ T292] bridge_slave_1: entered promiscuous mode [ 25.964587][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.971672][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.979031][ T290] bridge_slave_0: entered allmulticast mode [ 25.985277][ T290] bridge_slave_0: entered promiscuous mode [ 25.994413][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.001479][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.008680][ T290] bridge_slave_1: entered allmulticast mode [ 26.014873][ T290] bridge_slave_1: entered promiscuous mode [ 26.029572][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.036616][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.043725][ T289] bridge_slave_0: entered allmulticast mode [ 26.050026][ T289] bridge_slave_0: entered promiscuous mode [ 26.066543][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.073605][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.080700][ T289] bridge_slave_1: entered allmulticast mode [ 26.086918][ T289] bridge_slave_1: entered promiscuous mode [ 26.157889][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.165040][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.172143][ T291] bridge_slave_0: entered allmulticast mode [ 26.178458][ T291] bridge_slave_0: entered promiscuous mode [ 26.189678][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.196727][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.204135][ T291] bridge_slave_1: entered allmulticast mode [ 26.210490][ T291] bridge_slave_1: entered promiscuous mode [ 26.300146][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.307227][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.314660][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.321717][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.375062][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.382147][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.389454][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.396480][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.408749][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.415800][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.423070][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.430119][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.444872][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.452430][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.459767][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.466910][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.474847][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.482242][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.518643][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.525725][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.539487][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.546553][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.558991][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.566235][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.590264][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.597309][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.604942][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.611997][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.621407][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.628470][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.653974][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.661074][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.673525][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.680579][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.718021][ T292] veth0_vlan: entered promiscuous mode [ 26.726219][ T290] veth0_vlan: entered promiscuous mode [ 26.754736][ T289] veth0_vlan: entered promiscuous mode [ 26.762573][ T290] veth1_macvtap: entered promiscuous mode [ 26.773806][ T292] veth1_macvtap: entered promiscuous mode [ 26.781102][ T291] veth0_vlan: entered promiscuous mode [ 26.805502][ T289] veth1_macvtap: entered promiscuous mode [ 26.823279][ T291] veth1_macvtap: entered promiscuous mode [ 26.830990][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.930280][ T338] rust_binder: Write failure EFAULT in pid:2 [ 26.939949][ T338] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.076285][ T360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=360 comm=syz.3.8 [ 27.136021][ T377] Zero length message leads to an empty skb [ 27.165148][ T379] rust_binder: Error while translating object. [ 27.165179][ T379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.171843][ T379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:23 [ 27.183157][ T379] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.216263][ T379] kvm_intel: kvm [378]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xb9 [ 27.367578][ T394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 27.745491][ T401] netlink: 'syz.3.21': attribute type 13 has an invalid length. [ 27.860686][ T414] process 'syz.1.24' launched './file1' with NULL argv: empty string added [ 27.893550][ T414] netlink: 188 bytes leftover after parsing attributes in process `syz.1.24'. [ 27.903514][ T414] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 27.910593][ T414] rust_binder: Write failure EINVAL in pid:10 [ 28.164802][ T417] ======================================================= [ 28.164802][ T417] WARNING: The mand mount option has been deprecated and [ 28.164802][ T417] and is ignored by this kernel. Remove the mand [ 28.164802][ T417] option from the mount to silence this warning. [ 28.164802][ T417] ======================================================= [ 28.206277][ T417] SELinux: security_context_str_to_sid (syste_u軬泄 :) failed with errno=-22 [ 28.394241][ T426] input: syz0 as /devices/virtual/input/input4 [ 28.411695][ T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 28.412267][ T426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.422320][ T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:43 [ 28.451276][ T430] rust_binder: 45: no such ref 0 [ 28.494055][ T430] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 28.734676][ T444] rust_binder: Error while translating object. [ 28.734744][ T444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.743074][ T444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 28.782121][ T443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 28.801207][ T443] rust_binder: 15: no such ref 3 [ 28.806196][ T443] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 28.813300][ T443] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 28.820368][ T443] rust_binder: Write failure EFAULT in pid:15 [ 29.038212][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.050480][ T358] Bluetooth: hci0: command 0x1003 tx timeout [ 29.108236][ T415] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 29.248180][ T415] usb 2-1: device descriptor read/64, error -71 [ 29.498190][ T415] usb 2-1: device descriptor read/64, error -71 [ 29.593901][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 29.593921][ T36] audit: type=1400 audit(1762777876.810:168): avc: denied { read write } for pid=464 comm="syz.2.43" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.664389][ T36] audit: type=1400 audit(1762777876.810:169): avc: denied { open } for pid=464 comm="syz.2.43" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.707268][ T36] audit: type=1400 audit(1762777876.840:170): avc: denied { ioctl } for pid=464 comm="syz.2.43" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.741097][ T36] audit: type=1400 audit(1762777876.880:171): avc: denied { create } for pid=464 comm="syz.2.43" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.758182][ T415] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.791456][ T36] audit: type=1400 audit(1762777877.010:172): avc: denied { read } for pid=470 comm="syz.0.45" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.812441][ T36] audit: type=1400 audit(1762777877.010:173): avc: denied { open } for pid=470 comm="syz.0.45" path="net:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.836028][ T36] audit: type=1400 audit(1762777877.010:174): avc: denied { write } for pid=470 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.874932][ T36] audit: type=1400 audit(1762777877.070:175): avc: denied { mounton } for pid=470 comm="syz.0.45" path="/21/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 29.898775][ T36] audit: type=1400 audit(1762777877.120:176): avc: denied { read } for pid=473 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.908223][ T415] usb 2-1: device descriptor read/64, error -71 [ 29.982287][ T477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.982321][ T477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 29.994302][ T476] netlink: 68 bytes leftover after parsing attributes in process `syz.2.47'. [ 30.014400][ T36] audit: type=1400 audit(1762777877.230:177): avc: denied { ioctl } for pid=475 comm="syz.2.47" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4568 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.138511][ T483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=483 comm=syz.3.48 [ 30.174678][ T490] binder: Unknown parameter 'euid<00000000000000049663' [ 30.188224][ T415] usb 2-1: device descriptor read/64, error -71 [ 30.298242][ T415] usb usb2-port1: attempt power cycle [ 30.328176][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.478180][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 30.484491][ T10] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 30.492732][ T10] usb 3-1: config 0 has no interface number 0 [ 30.498897][ T10] usb 3-1: config 0 interface 148 has no altsetting 0 [ 30.507216][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 30.516338][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.524358][ T10] usb 3-1: Product: syz [ 30.528538][ T10] usb 3-1: Manufacturer: syz [ 30.533147][ T10] usb 3-1: SerialNumber: syz [ 30.538485][ T10] usb 3-1: config 0 descriptor?? [ 30.544419][ T10] pl2303 3-1:0.148: required interrupt-in endpoint missing [ 30.638765][ T415] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 30.659292][ T415] usb 2-1: device descriptor read/8, error -71 [ 30.745482][ T510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.754071][ T510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.762905][ T31] usb 3-1: USB disconnect, device number 2 [ 30.789256][ T415] usb 2-1: device descriptor read/8, error -71 [ 31.028210][ T415] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 31.049260][ T415] usb 2-1: device descriptor read/8, error -71 [ 31.179339][ T415] usb 2-1: device descriptor read/8, error -71 [ 31.288307][ T415] usb usb2-port1: unable to enumerate USB device [ 31.876093][ T521] usb usb8: usbfs: process 521 (syz.1.61) did not claim interface 0 before use [ 31.885875][ T521] SELinux: security_context_str_to_sid (syste_u軬泄 :) failed with errno=-22 [ 31.918175][ T523] overlayfs: failed to clone upperpath [ 31.978002][ T529] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.308192][ T509] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.459326][ T509] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.469698][ T509] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.479681][ T509] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.488801][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.496808][ T509] usb 3-1: SerialNumber: syz [ 32.703598][ T534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 32.703632][ T534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:38 [ 32.715170][ T509] usb 3-1: 0:2 : does not exist [ 32.731171][ T509] usb 3-1: USB disconnect, device number 3 [ 32.740884][ T457] udevd[457]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.788008][ T415] kernel write not supported for file [eventfd] (pid: 415 comm: kworker/1:3) [ 32.957078][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.312665][ T556] fuse: Bad value for 'fd' [ 33.468230][ T509] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.619312][ T509] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 33.628566][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.640301][ T509] usb 3-1: config 0 descriptor?? [ 34.053599][ T509] hid-generic 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 34.258728][ T415] usb 3-1: USB disconnect, device number 4 [ 34.397055][ T587] overlayfs: failed to clone upperpath [ 34.404067][ T587] netlink: 9 bytes leftover after parsing attributes in process `syz.1.85'. [ 34.413255][ T587] z00猉功: renamed from gretap0 (while UP) [ 34.420383][ T587] z00猉功: entered allmulticast mode [ 34.838246][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 34.838265][ T36] audit: type=1400 audit(1762777882.049:190): avc: denied { read write } for pid=601 comm="syz.2.91" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 34.868650][ T36] audit: type=1400 audit(1762777882.059:191): avc: denied { open } for pid=601 comm="syz.2.91" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 34.958210][ T358] Bluetooth: hci0: command 0x1003 tx timeout [ 34.958210][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.316283][ T630] overlayfs: failed to resolve './bus': -2 [ 35.385901][ T36] audit: type=1400 audit(1762777882.599:192): avc: denied { map } for pid=633 comm="syz.1.98" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=4835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.410931][ T36] audit: type=1400 audit(1762777882.599:193): avc: denied { read } for pid=633 comm="syz.1.98" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=4835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.436314][ T36] audit: type=1400 audit(1762777882.629:194): avc: denied { write } for pid=633 comm="syz.1.98" name="secretmem" dev="secretmem" ino=4835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.459275][ T36] audit: type=1400 audit(1762777882.669:195): avc: denied { sqpoll } for pid=635 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.522220][ T36] audit: type=1400 audit(1762777882.719:196): avc: denied { bind } for pid=637 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.566899][ T36] audit: type=1400 audit(1762777882.779:197): avc: denied { create } for pid=661 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.587202][ T36] audit: type=1400 audit(1762777882.799:198): avc: denied { connect } for pid=661 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.607877][ T36] audit: type=1400 audit(1762777882.799:199): avc: denied { write } for pid=661 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.328744][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.709316][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.719522][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.729174][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.738306][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.746395][ T10] usb 1-1: SerialNumber: syz [ 36.772229][ T710] fuse: Bad value for 'fd' [ 36.892521][ T724] netlink: 44 bytes leftover after parsing attributes in process `syz.3.124'. [ 37.006634][ T729] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.006654][ T729] rust_binder: Read failure Err(EFAULT) in pid:80 [ 37.015047][ T729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:80 [ 37.932285][ T735] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 37.941433][ T735] rust_binder: Error while translating object. [ 37.953680][ T735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.960144][ T735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 38.059538][ T759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.075826][ T759] IPv6: NLM_F_CREATE should be set when creating new route [ 38.083059][ T759] IPv6: NLM_F_CREATE should be set when creating new route [ 38.641573][ T772] SELinux: failed to load policy [ 39.102826][ T10] usb 1-1: 0:2 : does not exist [ 39.108188][ T413] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.121398][ T10] usb 1-1: USB disconnect, device number 2 [ 39.129499][ T823] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 39.137456][ T792] udevd[792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.258150][ T413] usb 3-1: Using ep0 maxpacket: 8 [ 39.267845][ T413] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.276828][ T413] usb 3-1: config 1 has an invalid interface number: 4 but max is 2 [ 39.284206][ T831] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 39.285280][ T413] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 39.302860][ T413] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.312991][ T413] usb 3-1: config 1 has no interface number 1 [ 39.319157][ T413] usb 3-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 39.333075][ T413] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.344047][ T413] usb 3-1: config 1 interface 4 has no altsetting 0 [ 39.352692][ T413] usb 3-1: string descriptor 0 read error: -22 [ 39.359686][ T413] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.374905][ T413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.389441][ T413] usb 3-1: 2:1 : invalid UAC_AS_GENERAL desc [ 39.512117][ T833] overlayfs: missing 'lowerdir' [ 39.595271][ T413] usb 3-1: USB disconnect, device number 5 [ 39.631762][ T846] can: request_module (can-proto-0) failed. [ 39.713209][ T870] overlayfs: failed to clone upperpath [ 39.741932][ T874] netlink: 92 bytes leftover after parsing attributes in process `syz.1.172'. [ 39.855113][ T903] netlink: 'syz.1.181': attribute type 11 has an invalid length. [ 39.953671][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 39.953688][ T36] audit: type=1400 audit(1762777887.169:233): avc: denied { create } for pid=904 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.988176][ T413] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 40.058267][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.139201][ T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 40.150213][ T413] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 40.159334][ T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.168359][ T413] usb 3-1: config 0 descriptor?? [ 40.173632][ T851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.219408][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.235784][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.245651][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.258826][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.267880][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.276785][ T10] usb 1-1: config 0 descriptor?? [ 40.584481][ T413] wacom 0003:056A:032F.0002: hidraw0: USB HID v0.05 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0 [ 40.630304][ T36] audit: type=1400 audit(1762777887.849:234): avc: denied { getopt } for pid=957 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.684880][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.693234][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.704553][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.712007][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.719571][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.727067][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.734497][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.741921][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.749370][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.756777][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.764210][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.771630][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.779078][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.786554][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.793990][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 40.801633][ T10] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 40.814327][ T10] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 40.934092][ T36] audit: type=1400 audit(1762777888.149:235): avc: denied { bind } for pid=972 comm="syz.1.205" laddr=fe80::13 lport=3 faddr=fe80::aa fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.957562][ T36] audit: type=1400 audit(1762777888.149:236): avc: denied { name_bind } for pid=972 comm="syz.1.205" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 40.959310][ T891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.978432][ T36] audit: type=1400 audit(1762777888.149:237): avc: denied { node_bind } for pid=972 comm="syz.1.205" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 40.991251][ T891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.015654][ T413] usb 3-1: USB disconnect, device number 6 [ 41.023334][ T36] audit: type=1400 audit(1762777888.159:238): avc: denied { shutdown } for pid=972 comm="syz.1.205" laddr=fe80::13 lport=3 faddr=fe80::aa fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.033048][ T977] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 41.064219][ T415] usb 1-1: USB disconnect, device number 3 [ 41.083565][ T981] netlink: 'syz.1.208': attribute type 12 has an invalid length. [ 41.096654][ T981] netlink: 72 bytes leftover after parsing attributes in process `syz.1.208'. [ 41.107404][ T981] syz.1.208 (981): attempted to duplicate a private mapping with mremap. This is not supported. [ 41.300568][ T994] 9pnet_fd: Insufficient options for proto=fd [ 41.641588][ T1003] capability: warning: `syz.1.214' uses 32-bit capabilities (legacy support in use) [ 41.665864][ T36] audit: type=1400 audit(1762777888.879:239): avc: denied { ioctl } for pid=1007 comm="syz.1.215" path="socket:[5529]" dev="sockfs" ino=5529 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.766097][ T36] audit: type=1400 audit(1762777888.979:240): avc: denied { accept } for pid=1016 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.785446][ T36] audit: type=1400 audit(1762777888.989:241): avc: denied { append } for pid=1016 comm="syz.0.217" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.808158][ T36] audit: type=1400 audit(1762777888.999:242): avc: denied { create } for pid=1016 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 41.915111][ T1020] rust_binder: Write failure EFAULT in pid:83 [ 41.993914][ T1022] fuseblk: Bad value for 'fd' [ 42.127202][ T1040] rust_binder: Error while translating object. [ 42.127229][ T1040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 42.133528][ T1040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:90 [ 42.181282][ T1047] cannot load conntrack support for proto=3 [ 42.223500][ T1056] netlink: 'syz.3.230': attribute type 12 has an invalid length. [ 42.326930][ T1070] futex_wake_op: syz.1.235 tries to shift op by 32; fix this program [ 43.309793][ T1143] netlink: 8568 bytes leftover after parsing attributes in process `syz.0.260'. [ 43.319808][ T1143] rust_binder: Write failure EFAULT in pid:121 [ 43.334572][ T1146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 43.380553][ T1154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.380584][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 43.538166][ T415] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.698143][ T415] usb 3-1: Using ep0 maxpacket: 16 [ 43.705851][ T415] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 43.714961][ T415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.723004][ T415] usb 3-1: Product: syz [ 43.727212][ T415] usb 3-1: Manufacturer: syz [ 43.731836][ T415] usb 3-1: SerialNumber: syz [ 43.737096][ T415] usb 3-1: config 0 descriptor?? [ 43.743266][ T415] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 43.751140][ T415] usb 3-1: Detected FT232H [ 43.942966][ T415] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 44.352868][ T415] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.635527][ T1185] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 44.645819][ T1185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 44.645834][ T1186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 44.760098][ T65] usb 3-1: USB disconnect, device number 7 [ 44.778708][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 44.790639][ T65] ftdi_sio 3-1:0.0: device disconnected [ 44.923464][ T1215] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.923489][ T1215] rust_binder: Read failure Err(EFAULT) in pid:167 [ 45.021475][ T1225] rust_binder: Error while translating object. [ 45.028079][ T1225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.034321][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 45.034337][ T36] audit: type=1400 audit(1762777892.249:255): avc: denied { create } for pid=1226 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 45.078149][ T1225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 45.099345][ T1230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 45.309108][ T1269] pim6reg1: entered promiscuous mode [ 45.329072][ T1278] netlink: 104 bytes leftover after parsing attributes in process `syz.1.301'. [ 45.331237][ T36] audit: type=1400 audit(1762777892.549:256): avc: denied { nlmsg_read } for pid=1273 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.338149][ T1269] pim6reg1: entered allmulticast mode [ 45.432090][ T1235] cgroup: fork rejected by pids controller in /syz0 [ 45.528180][ T1290] netlink: 312 bytes leftover after parsing attributes in process `syz.1.303'. [ 45.658473][ T1300] fuse: Unknown parameter '' [ 45.690891][ T36] audit: type=1400 audit(1762777892.909:257): avc: denied { create } for pid=1301 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.721739][ T1300] tipc: Started in network mode [ 45.728168][ T1300] tipc: Node identity 4, cluster identity 4711 [ 45.736857][ T1300] tipc: Node number set to 4 [ 45.787892][ T1302] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1302 comm=syz.1.306 [ 45.965837][ T36] audit: type=1400 audit(1762777893.179:258): avc: denied { listen } for pid=1318 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.986209][ T36] audit: type=1400 audit(1762777893.199:259): avc: denied { connect } for pid=1318 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.005842][ T36] audit: type=1400 audit(1762777893.199:260): avc: denied { shutdown } for pid=1318 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.039941][ T36] audit: type=1326 audit(1762777893.259:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1320 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea718f6c9 code=0x7ffc0000 [ 46.063271][ T36] audit: type=1326 audit(1762777893.259:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1320 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea718f6c9 code=0x7ffc0000 [ 46.086765][ T36] audit: type=1326 audit(1762777893.259:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1320 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ea718f6c9 code=0x7ffc0000 [ 46.112543][ T36] audit: type=1326 audit(1762777893.259:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1320 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ea718f6c9 code=0x7ffc0000 [ 46.146315][ T1325] syz.0.313 uses obsolete (PF_INET,SOCK_PACKET) [ 46.248419][ T1342] rust_binder: 116: no such ref 3 [ 46.253509][ T1342] rust_binder: 116: no such ref 1 [ 46.278147][ T1342] rust_binder: Write failure EFAULT in pid:116 [ 46.279314][ T1353] lo: entered allmulticast mode [ 46.298172][ T1353] lo: left allmulticast mode [ 46.410627][ T1357] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 47.192534][ T1394] rust_binder: 227: no such ref 2 [ 47.206491][ T1398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.338'. [ 47.330321][ T1416] binder: Bad value for 'defcontext' [ 47.588181][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 47.738171][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 47.745245][ T10] usb 3-1: config 6 has an invalid interface number: 182 but max is 3 [ 47.753477][ T10] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 47.763604][ T10] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 47.772485][ T10] usb 3-1: config 6 has no interface number 0 [ 47.778587][ T10] usb 3-1: config 6 interface 182 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 47.789570][ T730] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.797188][ T10] usb 3-1: config 6 interface 182 has no altsetting 0 [ 47.805524][ T10] usb 3-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=a3.d8 [ 47.814607][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.822617][ T10] usb 3-1: Product: syz [ 47.826800][ T10] usb 3-1: Manufacturer: syz [ 47.831436][ T10] usb 3-1: SerialNumber: syz [ 47.948148][ T730] usb 1-1: Using ep0 maxpacket: 32 [ 47.954361][ T730] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 47.962793][ T730] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 47.971448][ T730] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 47.980442][ T730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.990114][ T730] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.000967][ T730] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.014065][ T730] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.023230][ T730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.032378][ T730] usb 1-1: config 0 descriptor?? [ 48.199272][ T1478] tipc: Started in network mode [ 48.204243][ T1478] tipc: Node identity 4, cluster identity 4711 [ 48.210604][ T1478] tipc: Node number set to 4 [ 48.244978][ T730] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 48.258235][ T730] usb 1-1: USB disconnect, device number 4 [ 48.268050][ T730] usblp0: removed [ 48.284648][ T1488] overlayfs: failed to clone upperpath [ 48.304546][ T1490] netlink: 'syz.1.371': attribute type 4 has an invalid length. [ 48.314905][ T1490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 48.324551][ T1492] netlink: 'syz.1.371': attribute type 4 has an invalid length. [ 48.334218][ T1492] netlink: 'syz.1.371': attribute type 4 has an invalid length. [ 48.341970][ T1492] netlink: 'syz.1.371': attribute type 4 has an invalid length. [ 48.349753][ T1492] netlink: 'syz.1.371': attribute type 4 has an invalid length. [ 48.357456][ T1492] netlink: 'syz.1.371': attribute type 4 has an invalid length. [ 48.365183][ T1492] netlink: 'syz.1.371': attribute type 4 has an invalid length. [ 48.372944][ T1492] netlink: 'syz.1.371': attribute type 4 has an invalid length. [ 48.450025][ T1419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.461205][ T1419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.470641][ T65] usb 3-1: USB disconnect, device number 8 [ 48.548167][ T1512] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 48.688169][ T730] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.818180][ T730] usb 1-1: device descriptor read/64, error -71 [ 49.058169][ T730] usb 1-1: device descriptor read/64, error -71 [ 49.258185][ T31] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 49.308167][ T730] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.429192][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 49.449612][ T730] usb 1-1: device descriptor read/64, error -71 [ 49.450321][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 49.480176][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.505386][ T31] usb 3-1: config 0 descriptor?? [ 49.521470][ T1518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.688167][ T730] usb 1-1: device descriptor read/64, error -71 [ 49.792824][ T1564] TCP: TCP_TX_DELAY enabled [ 49.818188][ T730] usb usb1-port1: attempt power cycle [ 49.950591][ T31] wacom 0003:056A:032F.0004: hidraw0: USB HID v0.05 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0 [ 50.144425][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 50.144444][ T36] audit: type=1400 audit(1762777897.359:304): avc: denied { setopt } for pid=1517 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.151711][ T31] usb 3-1: USB disconnect, device number 9 [ 50.171100][ T730] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.184255][ T36] audit: type=1400 audit(1762777897.359:305): avc: denied { nosuid_transition } for pid=1517 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 50.204970][ T36] audit: type=1400 audit(1762777897.359:306): avc: denied { transition } for pid=1517 comm="syz.2.383" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 50.235629][ T36] audit: type=1400 audit(1762777897.359:307): avc: denied { entrypoint } for pid=1517 comm="syz.2.383" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1043 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.265197][ T36] audit: type=1400 audit(1762777897.359:308): avc: denied { noatsecure } for pid=1517 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 50.266298][ T730] usb 1-1: device descriptor read/8, error -71 [ 50.419252][ T730] usb 1-1: device descriptor read/8, error -71 [ 50.572623][ T36] audit: type=1400 audit(1762777897.789:309): avc: denied { bind } for pid=1576 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.594716][ T1579] rust_binder: Error while translating object. [ 50.594791][ T1579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 50.601298][ T1579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:244 [ 50.622236][ T1581] SELinux: security_context_str_to_sid (sytem_u軬泄 :) failed with errno=-22 [ 50.685389][ T1584] rust_binder: Write failure EFAULT in pid:249 [ 50.804954][ T1588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.058178][ T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 51.122087][ T1592] 9pnet_fd: Insufficient options for proto=fd [ 51.148212][ T730] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.169525][ T730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.180534][ T730] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 51.189641][ T730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.198649][ T730] usb 1-1: config 0 descriptor?? [ 51.217413][ T1604] 9pnet_fd: Insufficient options for proto=fd [ 51.224906][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 51.240421][ T31] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 51.249535][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.260475][ T31] usb 3-1: config 0 descriptor?? [ 51.265793][ T1590] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 51.531872][ T36] audit: type=1400 audit(1762777898.749:310): avc: denied { create } for pid=1632 comm="syz.3.425" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.552532][ T36] audit: type=1400 audit(1762777898.749:311): avc: denied { write } for pid=1632 comm="syz.3.425" name="file0" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.575128][ T36] audit: type=1400 audit(1762777898.749:312): avc: denied { open } for pid=1632 comm="syz.3.425" path="/153/file0" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.597908][ T36] audit: type=1400 audit(1762777898.749:313): avc: denied { setattr } for pid=1632 comm="syz.3.425" name="file0" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.622285][ T730] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 51.629770][ T730] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 51.637356][ T730] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 51.644827][ T730] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 51.652512][ T730] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 51.659982][ T730] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 51.667531][ T730] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 51.678076][ T730] steelseries 0003:1038:12B6.0005: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 51.691343][ T31] hid-generic 0003:04F3:0755.0006: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 51.709706][ T1654] 9pnet_fd: Insufficient options for proto=fd [ 51.756035][ T1658] .N: renamed from veth0_to_bond (while UP) [ 51.832058][ T730] steelseries 0003:1038:12B6.0005: hid_hw_raw_request() failed with -71 [ 51.847769][ T730] usb 1-1: USB disconnect, device number 8 [ 51.876600][ T31] usb 3-1: USB disconnect, device number 10 [ 52.399971][ T1678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.421414][ T1685] loop7: detected capacity change from 0 to 7 [ 52.435616][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.444877][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.452982][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.462195][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.470111][ T1684] loop7: unable to read partition table [ 52.490796][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.500452][ T1699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.500726][ T1699] rust_binder: 152: no such ref 536870909 [ 52.506113][ T1701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 52.507220][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.530745][ T1703] sock: sock_timestamping_bind_phc: sock not bind to device [ 52.531063][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.546390][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.555602][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.563739][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.563778][ T1698] binder: Bad value for 'defcontext' [ 52.572923][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.573193][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.591944][ T1699] binder: Bad value for 'defcontext' [ 52.595574][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.608911][ T1698] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 52.616866][ T1698] rust_binder: Write failure EINVAL in pid:152 [ 52.617010][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.632462][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.983642][ T1738] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 52.993476][ T1738] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 52.994938][ T1739] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 53.043808][ T1743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.458'. [ 53.074960][ T1745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 53.083902][ T1745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.459'. [ 53.142561][ T1752] mmap: syz.3.462 (1752) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.398177][ T413] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 53.478155][ T509] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.558162][ T413] usb 1-1: Using ep0 maxpacket: 32 [ 53.565318][ T413] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.573865][ T413] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.582528][ T413] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.591553][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.601238][ T413] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.612645][ T413] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.625892][ T413] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.635823][ T413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.646900][ T509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.658012][ T413] usb 1-1: config 0 descriptor?? [ 53.665407][ T509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.676115][ T509] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.689340][ T509] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.695758][ T1778] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 53.707217][ T1778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 53.708195][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.727029][ T509] usb 3-1: config 0 descriptor?? [ 53.877014][ T413] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 53.896719][ T413] usb 1-1: USB disconnect, device number 9 [ 53.908363][ T413] usblp0: removed [ 53.992513][ T1781] overlayfs: failed to clone upperpath [ 54.139674][ T509] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 54.149092][ T509] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 54.338212][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 54.498191][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 54.504587][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 54.513119][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 54.521843][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 54.531070][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.541020][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.550990][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.564233][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 54.573390][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.585330][ T10] usb 1-1: config 0 descriptor?? [ 54.750380][ C0] plantronics 0003:047F:FFFF.0007: hid_field_extract() called with n (132) > 32! (swapper/0) [ 54.793035][ T1754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.802794][ T1754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.812347][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 55.174811][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 55.174829][ T36] audit: type=1400 audit(1762777902.389:319): avc: denied { read write } for pid=1753 comm="syz.0.463" name="lp0" dev="devtmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.205026][ T36] audit: type=1400 audit(1762777902.419:320): avc: denied { open } for pid=1753 comm="syz.0.463" path="/dev/usb/lp0" dev="devtmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 55.230651][ T10] usb 1-1: USB disconnect, device number 10 [ 55.237541][ T10] usblp0: removed [ 55.588165][ T413] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 55.732865][ T1825] netlink: 'syz.1.490': attribute type 13 has an invalid length. [ 55.741364][ T1825] erspan0: refused to change device tx_queue_len [ 55.748617][ T1825] netlink: 'syz.1.490': attribute type 13 has an invalid length. [ 55.758431][ T1825] erspan0: refused to change device tx_queue_len [ 55.768443][ T1825] netlink: 'syz.1.490': attribute type 13 has an invalid length. [ 55.785010][ T1825] erspan0: refused to change device tx_queue_len [ 55.990244][ T36] audit: type=1400 audit(1762777903.209:321): avc: denied { setattr } for pid=1831 comm="syz.0.492" name="secretmem" dev="secretmem" ino=9262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.123633][ T1836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:303 [ 56.338110][ T1840] rust_binder: Error while translating object. [ 56.347461][ T1840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.353919][ T1840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 56.427726][ T1855] capability: warning: `syz.2.499' uses deprecated v2 capabilities in a way that may be insecure [ 56.463122][ T1858] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.500'. [ 56.489631][ T1860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'. [ 56.520270][ T1860] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 56.528952][ T1860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 56.674862][ T1864] rust_binder: Error while translating object. [ 56.674888][ T1864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.681291][ T1864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314 [ 56.968185][ T1833] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 57.018481][ T509] usb 3-1: USB disconnect, device number 11 [ 57.129273][ T1833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 57.140280][ T1833] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 57.149619][ T1833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.159001][ T1833] usb 1-1: config 0 descriptor?? [ 57.164488][ T1873] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.321182][ T36] audit: type=1400 audit(1762777904.539:322): avc: denied { read } for pid=1884 comm="syz.2.509" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.322019][ T1887] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 218) [ 57.343751][ T36] audit: type=1400 audit(1762777904.539:323): avc: denied { open } for pid=1884 comm="syz.2.509" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.343805][ T1887] rust_binder: Error while translating object. [ 57.377317][ T1887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.383757][ T1887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 57.753292][ T36] audit: type=1326 audit(1762777904.969:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1894 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ca78f6c9 code=0x7ffc0000 [ 57.786004][ T36] audit: type=1326 audit(1762777904.969:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1894 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ca78f6c9 code=0x7ffc0000 [ 57.813213][ T1833] hid-generic 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 57.826156][ T36] audit: type=1326 audit(1762777904.979:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1894 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f90ca78f6c9 code=0x7ffc0000 [ 57.851705][ T36] audit: type=1326 audit(1762777904.979:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1894 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ca78f6c9 code=0x7ffc0000 [ 57.874963][ T36] audit: type=1326 audit(1762777904.979:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1894 comm="syz.3.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f90ca78f6c9 code=0x7ffc0000 [ 58.015999][ T10] usb 1-1: USB disconnect, device number 11 [ 58.348195][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 58.428161][ T509] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.499221][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.507929][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.518253][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.527231][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.538244][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.549126][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.559312][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.567318][ T10] usb 1-1: Product: syz [ 58.571518][ T10] usb 1-1: Manufacturer: syz [ 58.578205][ T509] usb 3-1: Using ep0 maxpacket: 16 [ 58.578664][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 58.585360][ T509] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 58.588828][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 58.599005][ T509] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 58.608893][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 58.614394][ T509] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.619369][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 58.628837][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.642591][ T509] usb 3-1: SerialNumber: syz [ 58.648638][ T1917] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 58.655875][ T1917] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 58.974888][ T1933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.974923][ T1933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 59.204703][ T1940] netlink: 9 bytes leftover after parsing attributes in process `syz.3.524'. [ 59.223219][ T1940] gretap0: entered promiscuous mode [ 59.230021][ T1940] netlink: 5 bytes leftover after parsing attributes in process `syz.3.524'. [ 59.239064][ T1940] 0{X功: renamed from gretap0 [ 59.244858][ T1940] 0{X功: left promiscuous mode [ 59.250003][ T1940] 0{X功: entered allmulticast mode [ 59.256066][ T1940] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 59.272218][ T1941] netlink: 5 bytes leftover after parsing attributes in process `syz.3.524'. [ 59.281293][ T1941] 1{X功: renamed from 30{X功 (while UP) [ 59.288782][ T1941] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 59.454706][ T1951] veth1_macvtap: left promiscuous mode [ 59.460881][ T1951] macsec0: entered promiscuous mode [ 59.466280][ T1951] macsec0: entered allmulticast mode [ 59.473390][ T1951] macsec0: left promiscuous mode [ 59.478543][ T1951] macsec0: left allmulticast mode [ 60.351780][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 60.351798][ T36] audit: type=1400 audit(1762777907.569:352): avc: denied { search } for pid=1980 comm="syz.3.535" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.404130][ T1988] devpts: called with bogus options [ 60.925493][ T1990] overlayfs: failed to clone upperpath [ 61.059313][ T10] usb 1-1: USB disconnect, device number 12 [ 61.111474][ T36] audit: type=1400 audit(1762777908.329:353): avc: denied { getattr } for pid=2002 comm="syz.0.543" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.167603][ T2004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:341 [ 61.192179][ T509] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 61.210928][ T2006] rust_binder: 192: no such ref 0 [ 61.216233][ T2006] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 61.217173][ T509] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 61.223803][ T2006] rust_binder: 192: no such ref 2 [ 61.234223][ T509] usb 3-1: USB disconnect, device number 12 [ 61.235021][ T2006] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 61.266886][ T36] audit: type=1400 audit(1762777908.479:354): avc: denied { write } for pid=2010 comm="syz.2.545" name="udplite6" dev="proc" ino=4026532599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.476960][ T36] audit: type=1400 audit(1762777908.689:355): avc: denied { create } for pid=2025 comm="syz.3.549" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.510638][ T36] audit: type=1400 audit(1762777908.719:356): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.678160][ T509] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 61.827799][ T2052] fuse: Unknown parameter 'd' [ 61.833930][ T509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 61.851690][ T509] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 61.860806][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.871630][ T509] usb 3-1: config 0 descriptor?? [ 61.877249][ T2024] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.922372][ T2065] 9pnet_fd: Insufficient options for proto=fd [ 62.111348][ T2083] binder: Binderfs stats mode cannot be changed during a remount [ 62.287994][ T2024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.303912][ T2024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.319785][ T509] hid-generic 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 62.488163][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 62.516980][ T509] usb 3-1: USB disconnect, device number 13 [ 62.640038][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 62.651120][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 62.660274][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.674108][ T10] usb 1-1: config 0 descriptor?? [ 62.679439][ T2088] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 62.689606][ T2105] 9pnet_fd: Insufficient options for proto=fd [ 62.802813][ T2113] overlayfs: failed to clone upperpath [ 63.056382][ T2118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 63.056948][ T36] audit: type=1400 audit(1762777910.269:357): avc: denied { ioctl } for pid=2117 comm="syz.2.576" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.093139][ T10] hid-generic 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 63.184724][ T2121] overlayfs: failed to clone upperpath [ 63.202394][ T2123] overlayfs: failed to clone upperpath [ 63.222888][ T36] audit: type=1400 audit(1762777910.439:358): avc: denied { mount } for pid=2125 comm="syz.1.579" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.246559][ T2128] netlink: 'syz.1.580': attribute type 16 has an invalid length. [ 63.292221][ T2088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.300883][ T2088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.314931][ T10] usb 1-1: USB disconnect, device number 13 [ 63.342335][ T2142] netlink: 'syz.0.584': attribute type 29 has an invalid length. [ 63.573773][ T36] audit: type=1400 audit(1762777910.789:359): avc: denied { getopt } for pid=2143 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.574252][ T2144] rust_binder: Error while translating object. [ 63.593367][ T2144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.599625][ T2144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:216 [ 63.717014][ T655] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.293746][ T36] audit: type=1400 audit(1762777911.509:360): avc: denied { write } for pid=2168 comm="syz.0.593" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.317577][ T36] audit: type=1400 audit(1762777911.529:361): avc: denied { ioctl } for pid=2168 comm="syz.0.593" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.386153][ T2174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 64.415473][ T2174] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.423531][ T2174] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 64.432061][ T2174] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.440010][ T2174] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 64.504869][ T2177] rust_binder: 384: no such ref 3 [ 64.510001][ T2177] rust_binder: 384: no such ref 1 [ 64.515119][ T2177] rust_binder: Write failure EFAULT in pid:384 [ 64.578093][ T2184] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 64.838174][ T509] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 64.989354][ T509] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.998025][ T509] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.008228][ T509] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.017203][ T509] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.029286][ T509] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 65.038457][ T509] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.046452][ T509] usb 1-1: Product: syz [ 65.050688][ T509] usb 1-1: Manufacturer: syz [ 65.057680][ T509] cdc_wdm 1-1:1.0: skipping garbage [ 65.063003][ T509] cdc_wdm 1-1:1.0: skipping garbage [ 65.068771][ T509] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 65.074721][ T509] cdc_wdm 1-1:1.0: Unknown control protocol [ 65.458453][ T730] usb 1-1: USB disconnect, device number 14 [ 65.659984][ T2184] rust_binder: Error while translating object. [ 65.660023][ T2184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 65.666287][ T2184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:391 [ 65.758185][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.758183][ T358] Bluetooth: hci0: command 0x1003 tx timeout [ 65.828146][ T36] audit: type=1400 audit(1762777913.039:362): avc: denied { map } for pid=2190 comm="syz.2.601" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.852196][ T36] audit: type=1400 audit(1762777913.049:363): avc: denied { map } for pid=2190 comm="syz.2.601" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.246849][ T2217] rust_binder: 400: no such ref 2 [ 66.251996][ T2217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:400 [ 66.270336][ T2219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 66.290533][ T2219] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 66.298949][ T2219] rust_binder: Write failure EINVAL in pid:402 [ 66.345275][ T2231] rust_binder: 241: no such ref 3 [ 66.356900][ T2231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 66.531433][ T2239] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 66.540943][ T2239] rust_binder: Error while translating object. [ 66.549739][ T2239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.556000][ T2239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406 [ 66.598173][ T509] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 66.670653][ T2248] rust_binder: 408: no such ref 2 [ 66.759285][ T2231] netlink: 92 bytes leftover after parsing attributes in process `syz.2.617'. [ 66.769602][ T509] usb 3-1: unable to get BOS descriptor or descriptor too short [ 66.777839][ T509] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 66.785532][ T509] usb 3-1: can't read configurations, error -71 [ 67.457690][ T2277] fuse: Bad value for 'group_id' [ 67.458249][ T36] audit: type=1400 audit(1762777914.669:364): avc: denied { ioctl } for pid=2276 comm="syz.2.631" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.462976][ T2277] fuse: Bad value for 'group_id' [ 67.515142][ T2283] fuse: Unknown parameter 'fm0x0000000000000005' [ 67.705472][ T36] audit: type=1400 audit(1762777914.919:365): avc: denied { write } for pid=2294 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.710066][ T2295] overlayfs: regular lower layers cannot follow data lower layers [ 67.776860][ T2297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.838155][ T509] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 67.861151][ T2300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.641'. [ 67.954966][ T2305] rust_binder: Error while translating object. [ 67.955017][ T2305] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.961544][ T2305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432 [ 67.988158][ T509] usb 3-1: Using ep0 maxpacket: 32 [ 68.004887][ T509] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.006592][ T2307] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.025441][ T509] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.042316][ T509] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 68.053732][ T509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.063108][ T509] usb 3-1: config 0 descriptor?? [ 68.479354][ T2283] rust_binder: Write failure EINVAL in pid:251 [ 68.480270][ T509] usbhid 3-1:0.0: can't add hid device: -71 [ 68.492562][ T509] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 68.501351][ T509] usb 3-1: USB disconnect, device number 15 [ 68.800388][ T2320] fuse: Unknown parameter 'grVup_id' [ 68.806210][ T36] audit: type=1400 audit(1762777916.019:366): avc: denied { read } for pid=2319 comm="syz.1.649" name="file0" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.819068][ T2320] can: request_module (can-proto-6) failed. [ 68.828600][ T36] audit: type=1400 audit(1762777916.039:367): avc: denied { lock } for pid=2319 comm="syz.1.649" path="/196/file0" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.286031][ T36] audit: type=1400 audit(1762777916.499:368): avc: denied { read } for pid=2337 comm="syz.0.655" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.318266][ T36] audit: type=1400 audit(1762777916.499:369): avc: denied { open } for pid=2337 comm="syz.0.655" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.344580][ T36] audit: type=1400 audit(1762777916.529:370): avc: denied { ioctl } for pid=2337 comm="syz.0.655" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.423931][ T36] audit: type=1326 audit(1762777916.639:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.3.658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90ca78f6c9 code=0x0 [ 69.675203][ T2380] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 69.675228][ T2380] rust_binder: Read failure Err(EFAULT) in pid:448 [ 69.928170][ T509] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 70.108155][ T509] usb 1-1: Using ep0 maxpacket: 32 [ 70.118929][ T509] usb 1-1: config 5 has an invalid interface number: 169 but max is 1 [ 70.127270][ T509] usb 1-1: config 5 has an invalid interface number: 53 but max is 1 [ 70.135418][ T509] usb 1-1: config 5 has an invalid interface descriptor of length 7, skipping [ 70.144351][ T509] usb 1-1: config 5 has an invalid interface number: 145 but max is 1 [ 70.152750][ T509] usb 1-1: config 5 has 3 interfaces, different from the descriptor's value: 2 [ 70.161983][ T509] usb 1-1: config 5 has no interface number 0 [ 70.168119][ T509] usb 1-1: config 5 has no interface number 1 [ 70.174436][ T509] usb 1-1: config 5 has no interface number 2 [ 70.180839][ T509] usb 1-1: config 5 interface 169 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 70.192048][ T509] usb 1-1: config 5 interface 169 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 70.202897][ T509] usb 1-1: config 5 interface 169 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 16 [ 70.212997][ T509] usb 1-1: config 5 interface 169 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 70.225005][ T509] usb 1-1: config 5 interface 169 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 70.235944][ T509] usb 1-1: config 5 interface 169 altsetting 9 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 70.247853][ T509] usb 1-1: config 5 interface 169 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 357 [ 70.258015][ T509] usb 1-1: config 5 interface 169 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 70.268741][ T509] usb 1-1: config 5 interface 169 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 70.279481][ T509] usb 1-1: config 5 interface 169 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 70.290290][ T509] usb 1-1: config 5 interface 169 altsetting 9 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 70.303589][ T509] usb 1-1: config 5 interface 53 altsetting 3 has an endpoint descriptor with address 0x3B, changing to 0xB [ 70.315103][ T509] usb 1-1: config 5 interface 53 altsetting 3 bulk endpoint 0xB has invalid maxpacket 457 [ 70.325065][ T509] usb 1-1: config 5 interface 53 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 70.338156][ T509] usb 1-1: config 5 interface 53 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 70.348805][ T730] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 70.348826][ T509] usb 1-1: config 5 interface 53 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 70.367087][ T509] usb 1-1: config 5 interface 53 altsetting 3 bulk endpoint 0xD has invalid maxpacket 8 [ 70.376850][ T509] usb 1-1: config 5 interface 53 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 70.387758][ T509] usb 1-1: config 5 interface 53 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 70.398406][ T509] usb 1-1: config 5 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.409243][ T509] usb 1-1: config 5 interface 53 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 70.419875][ T509] usb 1-1: config 5 interface 53 altsetting 3 endpoint 0x6 has invalid maxpacket 1096, setting to 64 [ 70.430766][ T509] usb 1-1: config 5 interface 53 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 70.441374][ T509] usb 1-1: config 5 interface 53 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 70.452170][ T509] usb 1-1: config 5 interface 53 altsetting 3 has 14 endpoint descriptors, different from the interface descriptor's value: 15 [ 70.465316][ T509] usb 1-1: too many endpoints for config 5 interface 145 altsetting 210: 106, using maximum allowed: 30 [ 70.476488][ T509] usb 1-1: config 5 interface 145 altsetting 210 has a duplicate endpoint with address 0x9, skipping [ 70.487368][ T509] usb 1-1: config 5 interface 145 altsetting 210 has 1 endpoint descriptor, different from the interface descriptor's value: 106 [ 70.500695][ T509] usb 1-1: config 5 interface 169 has no altsetting 0 [ 70.507484][ T509] usb 1-1: config 5 interface 53 has no altsetting 0 [ 70.509490][ T730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.514213][ T509] usb 1-1: config 5 interface 145 has no altsetting 0 [ 70.525162][ T730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.533950][ T509] usb 1-1: New USB device found, idVendor=2001, idProduct=3c15, bcdDevice=7f.1f [ 70.541952][ T730] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 70.551234][ T509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.563727][ T730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.568601][ T509] usb 1-1: Product: 褝 [ 70.578264][ T730] usb 3-1: config 0 descriptor?? [ 70.580375][ T509] usb 1-1: Manufacturer: 惆 [ 70.589782][ T509] usb 1-1: SerialNumber: 犬 [ 70.595580][ T2382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.603038][ T2382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.610320][ T2382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.712612][ T2411] netlink: 'syz.3.678': attribute type 27 has an invalid length. [ 70.721789][ T2411] 1{X功: left allmulticast mode [ 70.838462][ T509] usb 1-1: USB disconnect, device number 15 [ 70.913312][ T2441] netlink: 'syz.1.687': attribute type 4 has an invalid length. [ 70.921665][ T2441] netlink: 17 bytes leftover after parsing attributes in process `syz.1.687'. [ 70.947993][ T2446] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 70.958463][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 70.958478][ T36] audit: type=1400 audit(1762777918.179:375): avc: denied { relabelto } for pid=2445 comm="syz.1.688" name="file0" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 70.992667][ T36] audit: type=1400 audit(1762777918.209:376): avc: denied { associate } for pid=2445 comm="syz.1.688" name="file0" dev="tmpfs" ino=1168 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 70.994975][ T730] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 71.361324][ T2462] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 71.368661][ T2462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:452 [ 71.609991][ T36] audit: type=1326 audit(1762777918.829:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ca78f6c9 code=0x7fc00000 [ 71.642555][ T730] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 71.661326][ T2469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 71.696946][ T36] audit: type=1400 audit(1762777918.909:378): avc: denied { remount } for pid=2478 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.799307][ T730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.810596][ T730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.821337][ T730] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.830488][ T730] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 71.839028][ T730] usb 1-1: Manufacturer: syz [ 71.844229][ T730] usb 1-1: config 0 descriptor?? [ 71.919409][ T36] audit: type=1400 audit(1762777919.139:379): avc: denied { mount } for pid=2491 comm="syz.1.702" name="/" dev="pstore" ino=1667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 72.454141][ T36] audit: type=1400 audit(1762777919.669:380): avc: denied { sqpoll } for pid=2495 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.662799][ T2465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.719536][ T730] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 72.731118][ T730] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 72.738819][ T730] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 72.751797][ T730] usb 1-1: USB disconnect, device number 16 [ 73.092866][ T509] usb 3-1: USB disconnect, device number 16 [ 73.108459][ T2552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 73.108490][ T2552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:266 [ 73.220920][ T2567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.239809][ T2567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.269847][ T36] audit: type=1400 audit(1762777920.489:381): avc: denied { read } for pid=2571 comm="syz.0.714" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 73.292153][ T36] audit: type=1400 audit(1762777920.489:382): avc: denied { open } for pid=2571 comm="syz.0.714" path="/137/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 73.548164][ T509] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 73.578205][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 73.581382][ T2582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 73.678536][ T509] usb 3-1: device descriptor read/64, error -71 [ 73.708142][ T31] usb 1-1: device descriptor read/64, error -71 [ 73.918178][ T509] usb 3-1: device descriptor read/64, error -71 [ 73.948152][ T31] usb 1-1: device descriptor read/64, error -71 [ 74.158154][ T509] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 74.188150][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 74.288155][ T509] usb 3-1: device descriptor read/64, error -71 [ 74.318149][ T31] usb 1-1: device descriptor read/64, error -71 [ 74.528143][ T509] usb 3-1: device descriptor read/64, error -71 [ 74.558149][ T31] usb 1-1: device descriptor read/64, error -71 [ 74.639271][ T509] usb usb3-port1: attempt power cycle [ 74.668224][ T31] usb usb1-port1: attempt power cycle [ 74.978166][ T509] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 74.999106][ T509] usb 3-1: device descriptor read/8, error -71 [ 75.008193][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 75.029197][ T31] usb 1-1: device descriptor read/8, error -71 [ 75.129243][ T509] usb 3-1: device descriptor read/8, error -71 [ 75.159307][ T31] usb 1-1: device descriptor read/8, error -71 [ 75.193927][ T36] audit: type=1400 audit(1762777922.409:383): avc: denied { bind } for pid=2605 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.213543][ T36] audit: type=1400 audit(1762777922.409:384): avc: denied { name_bind } for pid=2605 comm="syz.3.723" src=3620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 75.368162][ T509] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 75.389165][ T509] usb 3-1: device descriptor read/8, error -71 [ 75.398158][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 75.419167][ T31] usb 1-1: device descriptor read/8, error -71 [ 75.519354][ T509] usb 3-1: device descriptor read/8, error -71 [ 75.549163][ T31] usb 1-1: device descriptor read/8, error -71 [ 75.628229][ T509] usb usb3-port1: unable to enumerate USB device [ 75.658235][ T31] usb usb1-port1: unable to enumerate USB device [ 75.774334][ T2626] overlayfs: failed to clone lowerpath [ 75.879046][ T2639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2639 comm=syz.3.731 [ 76.284524][ T2650] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.306579][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 76.306597][ T36] audit: type=1400 audit(1762777923.519:386): avc: denied { write } for pid=2651 comm="syz.2.736" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.334559][ T36] audit: type=1400 audit(1762777923.519:387): avc: denied { remove_name } for pid=2651 comm="syz.2.736" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.357724][ T36] audit: type=1400 audit(1762777923.519:388): avc: denied { unlink } for pid=2651 comm="syz.2.736" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.396863][ T2653] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.405546][ T2653] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 76.414319][ T2653] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.422278][ T2653] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 76.430924][ T2655] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.439019][ T2655] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 76.449427][ T2655] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.452212][ T36] audit: type=1400 audit(1762777923.669:389): avc: denied { accept } for pid=2657 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.457445][ T2655] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 76.486403][ T36] audit: type=1400 audit(1762777923.699:390): avc: denied { create } for pid=2656 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 76.665987][ T2690] futex_wake_op: syz.1.743 tries to shift op by -1; fix this program [ 76.758169][ T65] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 76.888147][ T65] usb 1-1: device descriptor read/64, error -71 [ 77.138185][ T65] usb 1-1: device descriptor read/64, error -71 [ 77.145807][ T2721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=9572 sclass=netlink_audit_socket pid=2721 comm=syz.3.754 [ 77.348176][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 77.378145][ T65] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 77.500865][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 77.508616][ T65] usb 1-1: device descriptor read/64, error -71 [ 77.514936][ T10] usb 3-1: can't read configurations, error -71 [ 77.601822][ T2738] fuse: Unknown parameter 'group_i t' [ 77.748171][ T65] usb 1-1: device descriptor read/64, error -71 [ 77.858242][ T65] usb usb1-port1: attempt power cycle [ 78.201836][ T65] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 78.234673][ T65] usb 1-1: device descriptor read/8, error -71 [ 78.369115][ T65] usb 1-1: device descriptor read/8, error -71 [ 78.530573][ T2768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.530610][ T2768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 78.608199][ T65] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 78.639230][ T65] usb 1-1: device descriptor read/8, error -71 [ 78.769207][ T65] usb 1-1: device descriptor read/8, error -71 [ 78.798243][ T413] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 78.878519][ T65] usb usb1-port1: unable to enumerate USB device [ 78.949335][ T413] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.959349][ T413] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.972440][ T413] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.979114][ T413] usb 3-1: New USB device found, idVendor=056a, idProduct=0fc5, bcdDevice= 0.00 [ 78.988274][ T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.997033][ T413] usb 3-1: config 0 descriptor?? [ 79.107805][ T2781] overlayfs: failed to clone upperpath [ 79.114094][ T2781] overlayfs: failed to clone upperpath [ 79.604925][ T2775] rust_binder: Got transaction with invalid offset. [ 79.604970][ T2775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.611651][ T2775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 79.622694][ T413] usbhid 3-1:0.0: can't add hid device: -71 [ 79.638059][ T413] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 79.647434][ T413] usb 3-1: USB disconnect, device number 23 [ 79.735543][ T2807] overlayfs: failed to clone upperpath [ 79.742613][ T36] audit: type=1400 audit(1762777926.959:391): avc: denied { accept } for pid=2806 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.771445][ T36] audit: type=1400 audit(1762777926.989:392): avc: denied { create } for pid=2811 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.877235][ T36] audit: type=1400 audit(1762777927.079:393): avc: denied { map } for pid=2811 comm="syz.3.784" path="socket:[12013]" dev="sockfs" ino=12013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 79.929379][ T2820] /dev/loop0: Can't lookup blockdev [ 79.958139][ T65] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 80.109282][ T65] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 80.118561][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.130535][ T65] usb 1-1: config 0 descriptor?? [ 80.147298][ T36] audit: type=1400 audit(1762777927.359:394): avc: denied { create } for pid=2833 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 80.538286][ T65] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 80.545995][ T65] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 80.553914][ T65] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 80.554477][ T2849] overlayfs: failed to clone upperpath [ 80.561874][ T65] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 80.574850][ T65] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 80.583169][ T65] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v1.01 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 81.380385][ T36] audit: type=1326 audit(1762777928.599:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.403720][ T36] audit: type=1326 audit(1762777928.599:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.427744][ T36] audit: type=1326 audit(1762777928.599:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.451479][ T36] audit: type=1326 audit(1762777928.599:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.475907][ T36] audit: type=1326 audit(1762777928.599:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.499322][ T36] audit: type=1326 audit(1762777928.599:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.523937][ T36] audit: type=1326 audit(1762777928.599:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.547393][ T36] audit: type=1326 audit(1762777928.599:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.549607][ T2869] netlink: 'syz.1.805': attribute type 16 has an invalid length. [ 81.570875][ T36] audit: type=1326 audit(1762777928.599:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.579029][ T2869] netlink: 'syz.1.805': attribute type 3 has an invalid length. [ 81.602478][ T36] audit: type=1326 audit(1762777928.599:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2860 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86c78f6c9 code=0x7ffc0000 [ 81.610204][ T2869] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.805'. [ 82.070493][ T2884] 9pnet_fd: Insufficient options for proto=fd [ 82.089353][ T2886] overlayfs: failed to clone upperpath [ 82.515092][ T2916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.823'. [ 82.524041][ T2916] netlink: 43 bytes leftover after parsing attributes in process `syz.1.823'. [ 82.532943][ T2916] netlink: 43 bytes leftover after parsing attributes in process `syz.1.823'. [ 82.561248][ T31] usb 1-1: USB disconnect, device number 25 [ 82.638045][ T2939] fuse: Unknown parameter '00000000000000000000005FL1D鎈酠鬏>' [ 83.498552][ T2973] rust_binder: Error while translating object. [ 83.498585][ T2973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 83.504815][ T2973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:487 [ 83.521383][ T2974] /dev/rnullb0: Can't open blockdev [ 83.605469][ T2984] __vm_enough_memory: pid: 2984, comm: syz.0.847, bytes: 18014402804453376 not enough memory for the allocation [ 83.634766][ T2989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:493 [ 83.707515][ T2994] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 84.042760][ T2996] netlink: 324 bytes leftover after parsing attributes in process `syz.1.851'. [ 84.289253][ T3016] sit0: entered promiscuous mode [ 84.296800][ T3016] netlink: 1 bytes leftover after parsing attributes in process `syz.3.859'. [ 84.499272][ T3022] binder: Unknown parameter 'defcontext01777777777777777777777' [ 84.547964][ T3030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.547994][ T3030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.554553][ T3030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.690911][ T3055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=3055 comm=syz.1.873 [ 84.735588][ T3061] rust_binder: 346: no such ref 0 [ 84.740821][ T3061] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 84.748055][ T3061] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 84.755642][ T3061] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 84.763079][ T3061] rust_binder: 346: no such ref 0 [ 85.718153][ T65] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 85.869673][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.873068][ T3094] rust_binder: Write failure EFAULT in pid:357 [ 85.877715][ T65] usb 1-1: not running at top speed; connect to a high speed hub [ 85.892554][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.902895][ T65] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.918563][ T65] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.936052][ T65] usb 1-1: config 1 interface 0 has no altsetting 0 [ 85.951070][ T65] usb 1-1: string descriptor 0 read error: -22 [ 85.957326][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.976039][ T65] usb 1-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11 [ 86.077047][ T3116] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.896'. [ 86.089097][ T3116] netlink: 324 bytes leftover after parsing attributes in process `syz.3.896'. [ 86.226093][ T3082] ------------[ cut here ]------------ [ 86.231635][ T3082] WARNING: CPU: 0 PID: 3082 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 86.241155][ T3082] Modules linked in: [ 86.245099][ T3082] CPU: 0 UID: 0 PID: 3082 Comm: syz.0.883 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 86.256647][ T3082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.266783][ T3082] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 86.272790][ T3082] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 86.277198][ T3125] rust_binder: Error while translating object. [ 86.292469][ T3082] RSP: 0018:ffffc9000eee7560 EFLAGS: 00010246 [ 86.292499][ T3082] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 86.292516][ T3082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000eee7618 [ 86.299361][ T3125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 86.304789][ T3082] RBP: ffffc9000eee76a0 R08: ffffc9000eee7617 R09: 0000000000000000 [ 86.304815][ T3082] R10: ffffc9000eee7600 R11: fffff52001ddcec3 R12: ffffc9000eee75a0 [ 86.313314][ T3125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:514 [ 86.320923][ T3082] R13: dffffc0000000000 R14: 1ffff92001ddceb0 R15: 0000000000000000 [ 86.320947][ T3082] FS: 00007f3ea80966c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 86.372656][ T3082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.379299][ T3082] CR2: 000020000000f000 CR3: 000000010c256000 CR4: 00000000003526b0 [ 86.387298][ T3082] Call Trace: [ 86.390612][ T3082] [ 86.393560][ T3082] ? vfs_write+0x3c0/0xf30 [ 86.398072][ T3082] ? ksys_write+0x141/0x250 [ 86.402713][ T3082] ? x64_sys_call+0x271c/0x2ee0 [ 86.407605][ T3082] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 86.413380][ T3082] ? hashtab_init+0xdb/0x1f0 [ 86.417995][ T3082] ___kmalloc_large_node+0x81/0x220 [ 86.423236][ T3082] ? hashtab_init+0xdb/0x1f0 [ 86.427849][ T3082] __kmalloc_large_node_noprof+0x1e/0xe0 [ 86.433526][ T3082] ? hashtab_init+0xdb/0x1f0 [ 86.438175][ T3082] __kmalloc_noprof+0x336/0x530 [ 86.443047][ T3082] ? kasan_save_alloc_info+0x40/0x50 [ 86.448376][ T3082] hashtab_init+0xdb/0x1f0 [ 86.452816][ T3082] ? common_read+0x16d/0x480 [ 86.457423][ T3082] symtab_init+0x44/0x70 [ 86.461695][ T3082] common_read+0x1de/0x480 [ 86.466161][ T3082] ? __cfi_ebitmap_read+0x10/0x10 [ 86.471245][ T3082] ? __cfi_common_read+0x10/0x10 [ 86.476219][ T3082] ? hashtab_init+0x105/0x1f0 [ 86.480960][ T3082] policydb_read+0xaab/0x28c0 [ 86.485685][ T3082] ? __kasan_kmalloc+0x96/0xb0 [ 86.490499][ T3082] ? __cfi_policydb_read+0x10/0x10 [ 86.495993][ T3082] ? security_load_policy+0x128/0x12f0 [ 86.501493][ T3082] security_load_policy+0x162/0x12f0 [ 86.506810][ T3082] ? irqentry_exit+0x4a/0x60 [ 86.511453][ T3082] ? exc_page_fault+0x66/0xc0 [ 86.516169][ T3082] ? asm_exc_page_fault+0x2b/0x30 [ 86.521243][ T3082] ? __cfi_security_load_policy+0x10/0x10 [ 86.527004][ T3082] ? rep_movs_alternative+0x4a/0xa0 [ 86.532258][ T3082] sel_write_load+0x298/0x5e0 [ 86.536989][ T3082] ? futex_wait+0x29a/0x7a0 [ 86.541543][ T3082] ? __cfi_sel_write_load+0x10/0x10 [ 86.546780][ T3082] ? __cfi_futex_wait+0x10/0x10 [ 86.551686][ T3082] ? bpf_lsm_file_permission+0xd/0x20 [ 86.557112][ T3082] ? __cfi_sel_write_load+0x10/0x10 [ 86.562360][ T3082] vfs_write+0x3c0/0xf30 [ 86.566628][ T3082] ? __cfi_vfs_write+0x10/0x10 [ 86.571430][ T3082] ? do_futex+0x309/0x500 [ 86.575787][ T3082] ? __cfi_do_futex+0x10/0x10 [ 86.580523][ T3082] ? __kasan_check_read+0x15/0x20 [ 86.585593][ T3082] ksys_write+0x141/0x250 [ 86.589975][ T3082] ? __cfi_ksys_write+0x10/0x10 [ 86.595300][ T3082] ? __kasan_check_write+0x18/0x20 [ 86.600457][ T3082] ? fpregs_restore_userregs+0x11d/0x260 [ 86.606118][ T3082] __x64_sys_write+0x7f/0x90 [ 86.610755][ T3082] x64_sys_call+0x271c/0x2ee0 [ 86.615496][ T3082] do_syscall_64+0x58/0xf0 [ 86.619951][ T3082] ? clear_bhb_loop+0x50/0xa0 [ 86.624659][ T3082] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.630601][ T3082] RIP: 0033:0x7f3ea718f6c9 [ 86.635577][ T3082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.655257][ T3082] RSP: 002b:00007f3ea8096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.663744][ T3082] RAX: ffffffffffffffda RBX: 00007f3ea73e5fa0 RCX: 00007f3ea718f6c9 [ 86.671799][ T3082] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000006 [ 86.679817][ T3082] RBP: 00007f3ea7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.687893][ T3082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.695912][ T3082] R13: 00007f3ea73e6038 R14: 00007f3ea73e5fa0 R15: 00007ffd225c0348 [ 86.704028][ T3082] [ 86.707059][ T3082] ---[ end trace 0000000000000000 ]--- [ 86.712959][ T65] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 86.721714][ T3082] SELinux: failed to load policy [ 86.870587][ T65] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 86.879728][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.887807][ T65] usb 3-1: Product: syz [ 86.892028][ T65] usb 3-1: Manufacturer: syz [ 86.896637][ T65] usb 3-1: SerialNumber: syz [ 86.902007][ T65] usb 3-1: config 0 descriptor?? [ 87.126498][ T65] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 87.136312][ T65] usb 3-1: USB disconnect, device number 24 [ 87.157093][ T792] udevd[792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.319854][ T65] usb 1-1: USB disconnect, device number 26